Microsoft Graph permissions
Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.
Public permission catalog
1132 matching definitionsOrgSettings-Microsoft365Install.ReadWrite.AllApplicationAdmin consent
Read and write organization-wide Microsoft 365 apps installation settings
Allows the app to read and write organization-wide Microsoft 365 apps installation settings, without a signed-in user.
- Permission ID
- 83f7232f-763c-47b2-a097-e35d2cbe1da5
- Catalog state
- Enabled
OrgSettings-Microsoft365Install.ReadWrite.AllDelegatedAdmin consent
Read and write organization-wide Microsoft 365 apps installation settings
Allows the app to read and write organization-wide Microsoft 365 apps installation settings on behalf of the signed-in user.
- Permission ID
- 1ff35e91-19eb-42d8-aa2d-cc9891127ae5
- Catalog state
- Enabled
OrgSettings-Todo.Read.AllApplicationAdmin consent
Read organization-wide Microsoft To Do settings
Allows the app to read organization-wide Microsoft To Do settings, without a signed-in user.
- Permission ID
- e4d9cd09-d858-4363-9410-abb96737f0cf
- Catalog state
- Enabled
OrgSettings-Todo.Read.AllDelegatedAdmin consent
Read organization-wide Microsoft To Do settings
Allows the app to read organization-wide Microsoft To Do settings on behalf of the signed-in user.
- Permission ID
- 7ff96f41-f022-45ba-acd8-ef3f03063d6b
- Catalog state
- Enabled
OrgSettings-Todo.ReadWrite.AllApplicationAdmin consent
Read and write organization-wide Microsoft To Do settings
Allows the app to read and write organization-wide Microsoft To Do settings, without a signed-in user.
- Permission ID
- 5febc9da-e0d0-4576-bd13-ae70b2179a39
- Catalog state
- Enabled
OrgSettings-Todo.ReadWrite.AllDelegatedAdmin consent
Read and write organization-wide Microsoft To Do settings
Allows the app to read and write organization-wide Microsoft To Do settings on behalf of the signed-in user.
- Permission ID
- 087502c2-5263-433e-abe3-8f77231a0627
- Catalog state
- Enabled
PartnerBilling.Read.AllApplicationAdmin consent
Read all billing data for your company's tenant
Allows the app to read all of billing data from Microsoft for your company's tenant, without a signed-in user. This includes reading billed and unbilled azure usage and invoice reconciliation data.
- Permission ID
- 7c3e1994-38ff-4412-a99b-9369f6bb7706
- Catalog state
- Enabled
PartnerBilling.Read.AllDelegatedAdmin consent
Read all billing data for your company's tenant
Allows the app to read all of billing data from Microsoft for your company's tenant, on behalf of the signed-in user. This includes reading billed and unbilled Usage and Invoice reconciliation data.
- Permission ID
- 8804798e-5934-4e30-8ce3-ef88257cecd4
- Catalog state
- Enabled
PartnerSecurity.Read.AllApplicationAdmin consent
Read security alerts of customer with CSP relationship
Allows the app to read security alerts of customer with CSP relationship, without a signed-in user.
- Permission ID
- 21ffa320-2e7f-47d3-a466-7ff04d2dd68d
- Catalog state
- Enabled
PartnerSecurity.Read.AllDelegatedAdmin consent
Read security alerts of customer with CSP relationship
Allows the app to read security alerts of customer with CSP relationship on behalf of the partner signed-in user.
- Permission ID
- 5567b981-0bf1-4796-9038-0648b46e116d
- Catalog state
- Enabled
PartnerSecurity.ReadWrite.AllApplicationAdmin consent
Read security alerts and update status of security alerts of customer with CSP relationship
Allows the app to read security alerts and update status of alerts of customer with CSP relationship, without a signed-in user.
- Permission ID
- 04a2c935-5b4b-474a-be42-11f53111f271
- Catalog state
- Enabled
PartnerSecurity.ReadWrite.AllDelegatedAdmin consent
Read security alerts and update status of security alerts of customer with CSP relationship
Allows the app to read security alerts and update status of alerts of customer with CSP relationship on behalf of the partner signed-in user.
- Permission ID
- 0cd2c1f6-94a1-4075-ab8c-0b1aff2e1ad5
- Catalog state
- Enabled
PendingExternalUserProfile.Read.AllApplicationAdmin consent
Read all pending external user profiles
Allows the app to read available properties of pending external user profiles, without a signed-in user.
- Permission ID
- bdfb26d9-bb36-49be-9b4c-b8cbf4b05808
- Catalog state
- Enabled
PendingExternalUserProfile.Read.AllDelegatedAdmin consent
Read pending external user profiles
Allows the app to read available properties of pending external user profiles, on behalf of the signed-in user.
- Permission ID
- d88fd3fb-53d3-4c1c-8c39-787fcac2ed7a
- Catalog state
- Enabled
PendingExternalUserProfile.ReadWrite.AllApplicationAdmin consent
Read and write all pending external user profiles
Allows the app to read and write available properties of pending external user profiles, without a signed-in user.
- Permission ID
- 8363c2b8-6ff7-420b-9966-c5884c2d48bc
- Catalog state
- Enabled
PendingExternalUserProfile.ReadWrite.AllDelegatedAdmin consent
Read and write pending external user profiles
Allows the app to read and write available properties of pending external user profiles, on behalf of the signed-in user.
- Permission ID
- 93a1fb28-c908-4826-904e-0c74ad352b73
- Catalog state
- Enabled
People.ReadDelegatedDelegated consent
Read users' relevant people lists
Allows the app to read a ranked list of relevant people of the signed-in user. The list includes local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).
- Permission ID
- ba47897c-39ec-4d83-8086-ee8256fa737d
- Catalog state
- Enabled
People.Read.AllApplicationAdmin consent
Read all users' relevant people lists
Allows the app to read any user's scored list of relevant people, without a signed-in user. The list can include local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).
- Permission ID
- b528084d-ad10-4598-8b93-929746b4d7d6
- Catalog state
- Enabled
People.Read.AllDelegatedAdmin consent
Read all users' relevant people lists
Allows the app to read a scored list of relevant people of the signed-in user or other users in the signed-in user's organization. The list can include local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).
- Permission ID
- b89f9189-71a5-4e70-b041-9887f0bc7e4a
- Catalog state
- Enabled
PeopleSettings.Read.AllApplicationAdmin consent
Read all tenant-wide people settings
Allows the application to read tenant-wide people settings without a signed-in user.
- Permission ID
- ef02f2e7-e22d-4c77-8614-8f765683b86e
- Catalog state
- Enabled
PeopleSettings.Read.AllDelegatedAdmin consent
Read tenant-wide people settings
Allows the application to read tenant-wide people settings on behalf of the signed-in user.
- Permission ID
- ec762c5f-388b-4b16-8693-ac1efbc611bc
- Catalog state
- Enabled
PeopleSettings.ReadWrite.AllApplicationAdmin consent
Read and write all tenant-wide people settings
Allows the application to read and write tenant-wide people settings without a signed-in user.
- Permission ID
- b6890674-9dd5-4e42-bb15-5af07f541ae1
- Catalog state
- Enabled
PeopleSettings.ReadWrite.AllDelegatedAdmin consent
Read and write tenant-wide people settings
Allows the application to read and write tenant-wide people settings on behalf of the signed-in user.
- Permission ID
- e67e6727-c080-415e-b521-e3f35d5248e9
- Catalog state
- Enabled
Place.Read.AllApplicationAdmin consent
Read all company places
Allows the app to read company places (conference rooms and room lists) for calendar events and other applications, without a signed-in user.
- Permission ID
- 913b9306-0ce1-42b8-9137-6a7df690a760
- Catalog state
- Enabled
Place.Read.AllDelegatedAdmin consent
Read all company places
Allows the app to read your company's places (conference rooms and room lists) for calendar events and other applications, on behalf of the signed-in user.
- Permission ID
- cb8f45a0-5c2e-4ea1-b803-84b870a7d7ec
- Catalog state
- Enabled