Microsoft Graph permissions

Read and write organization places

Allows the app to manage organization places (conference rooms and room lists) for calendar events and other applications, on behalf of the signed-in user.

Permission ID

4c06a06a-098a-4063-868e-5dfee3827264

Catalog state

Enabled

Read all workplace devices

Allows the app to read all workplace devices, without a signed-in user.

Permission ID

8b724a84-ceac-4fd9-897e-e31ba8f2d7a3

Catalog state

Enabled

Read all workplace devices

Allows the app to read all workplace devices, on behalf of the signed-in user.

Permission ID

4c7f93d2-6b0b-4e05-91aa-87842f0a2142

Catalog state

Enabled

Read and write all workplace devices

Allows the app to read and write all workplace devices, without a signed-in user.

Permission ID

2d510721-5c4e-43cd-bfdb-ac0f8819fb92

Catalog state

Enabled

Read and write all workplace devices

Allows the app to read and write all workplace devices, on behalf of the signed-in user.

Permission ID

eafd6a71-e95a-4f8a-bb6e-fb84ab7fbd9e

Catalog state

Enabled

Read and write telemetry for all workplace devices.

Allows the app to read and write telemetry for all workplace devices, without a signed-in user.

Permission ID

27fc435f-44e2-4b30-bf3c-e0ce74aed618

Catalog state

Enabled

Read your organization's policies

Allows the app to read all your organization's policies without a signed in user.

Permission ID

246dd0d5-5bd0-4def-940b-0421030a5b68

Catalog state

Enabled

Read your organization's policies

Allows the app to read your organization's policies on behalf of the signed-in user.

Permission ID

572fea84-0151-49b2-9301-11cb16974376

Catalog state

Enabled

Read your organization's conditional access policies

Allows the app to read your organization's conditional access policies, without a signed-in user.

Permission ID

37730810-e9ba-4e46-b07e-8ca78d182097

Catalog state

Enabled

Read your organization's conditional access policies

Allows the app to read your organization's conditional access policies on behalf of the signed-in user.

Permission ID

633e0fce-8c58-4cfb-9495-12bbd5a24f7c

Catalog state

Enabled

Read your organization's device configuration policies

Allows the application to read your organization's device configuration policies without a signed-in user. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.

Permission ID

bdba4817-6ba1-4a7c-8a01-be9bc7c242dd

Catalog state

Enabled

Read your organization's device configuration policies

Allows the app to read your organization's device configuration policies on behalf of the signed-in user. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.

Permission ID

3616a4b0-6746-49c4-a678-4c237599074d

Catalog state

Enabled

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID

b21b72f6-4e6a-4533-9112-47eea9f97b28

Catalog state

Enabled

Read your organization’s identity protection policy

Allows the app to read your organization’s identity protection policy on behalf of the signed-in user.

Permission ID

d146432f-b803-4ed4-8d42-ba74193a6ede

Catalog state

Enabled

Read consent and permission grant policies

Allows the app to read policies related to consent and permission grants for applications, without a signed-in user.

Permission ID

9e640839-a198-48fb-8b9a-013fd6f6cbcd

Catalog state

Enabled

Read consent and permission grant policies

Allows the app to read policies related to consent and permission grants for applications, on behalf of the signed-in user.

Permission ID

414de6ea-2d92-462f-b120-6e2a809a6d01

Catalog state

Enabled

Read and write your organization's directory access review default policy

Allows the app to read and write your organization's directory access review default policy without a signed-in user.

Permission ID

77c863fd-06c0-47ce-a7eb-49773e89d319

Catalog state

Enabled

Read and write your organization's directory access review default policy

Allows the app to read and write your organization's directory access review default policy on behalf of the signed-in user.

Permission ID

4f5bc9c8-ea54-4772-973a-9ca119cb0409

Catalog state

Enabled

Read and write your organization's application configuration policies

Allows the app to read and write your organization's application configuration policies, without a signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy.

Permission ID

be74164b-cff1-491c-8741-e671cb536e13

Catalog state

Enabled

Read and write your organization's application configuration policies

Allows the app to read and write your organization's application configuration policies on behalf of the signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy.

Permission ID

b27add92-efb2-4f16-84f5-8108ba77985c

Catalog state

Enabled

Read and write authentication flow policies

Allows the app to read and write all authentication flow policies for the tenant, without a signed-in user.

Permission ID

25f85f3c-f66c-4205-8cd5-de92dd7f0cec

Catalog state

Enabled

Read and write authentication flow policies

Allows the app to read and write the authentication flow policies, on behalf of the signed-in user.

Permission ID

edb72de9-4252-4d03-a925-451deef99db7

Catalog state

Enabled

Read and write all authentication method policies

Allows the app to read and write all authentication method policies for the tenant, without a signed-in user.

Permission ID

29c18626-4985-4dcd-85c0-193eef327366

Catalog state

Enabled

Read and write authentication method policies

Allows the app to read and write the authentication method policies, on behalf of the signed-in user.

Permission ID

7e823077-d88e-468f-a337-e18f1f0e6c7c

Catalog state

Enabled

Read and write your organization's authorization policy

Allows the app to read and write your organization's authorization policy without a signed in user. For example, authorization policies can control some of the permissions that the out-of-the-box user role has by default.

Permission ID

fb221be6-99f2-473f-bd32-01c6a0e9ca3b

Catalog state

Enabled