Microsoft Graph permissions

Read and write your organization's authorization policy

Allows the app to read and write your organization's authorization policy on behalf of the signed-in user. For example, authorization policies can control some of the permissions that the out-of-the-box user role has by default.

Permission ID

edd3c878-b384-41fd-95ad-e7407dd775be

Catalog state

Enabled

Read and write your organization's conditional access policies

Allows the app to read and write your organization's conditional access policies, without a signed-in user.

Permission ID

01c0a623-fc9b-48e9-b794-0756f8e8f067

Catalog state

Enabled

Read and write your organization's conditional access policies

Allows the app to read and write your organization's conditional access policies on behalf of the signed-in user.

Permission ID

ad902697-1014-4ef5-81ef-2b4301988e8c

Catalog state

Enabled

Read and write your organization's consent request policy

Allows the app to read and write your organization's consent requests policy without a signed-in user.

Permission ID

999f8c63-0a38-4f1b-91fd-ed1947bdd1a9

Catalog state

Enabled

Read and write consent request policy

Allows the app to read and write your organization's consent requests policy on behalf of the signed-in user.

Permission ID

4d135e65-66b8-41a8-9f8b-081452c91774

Catalog state

Enabled

Read and write your organization's cross tenant access policies

Allows the app to read and write your organization's cross tenant access policies without a signed-in user.

Permission ID

338163d7-f101-4c92-94ba-ca46fe52447c

Catalog state

Enabled

Read and write your organization's cross tenant access policies

Allows the app to read and write your organization's cross tenant access policies on behalf of the signed-in user.

Permission ID

014b43d0-6ed4-4fc6-84dc-4b6f7bae7d85

Catalog state

Enabled

Read and write your organization's M365 cross tenant access capabilities

Allows the app to read and write your organization's M365 cross tenant access capabilities without a signed-in user.

Permission ID

a6325ae7-2b73-4dbd-abed-fbeacfbf8696

Catalog state

Enabled

Read and write your organization's M365 cross tenant access capabilities

Allows the app to read and write your organization's M365 cross tenant access capabilities on behalf of the signed-in user.

Permission ID

9ef7463f-1d39-406f-89ea-3483a4645e1c

Catalog state

Enabled

Read and write your organization's device configuration policies

Allows the application to read and write your organization's device configuration policies without a signed-in user. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.

Permission ID

230fb2d5-aa21-49c1-bfa7-ae1be179d867

Catalog state

Enabled

Read and write your organization's device configuration policies

Allows the app to read and write your organization's device configuration policies on behalf of the signed-in user. For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks.

Permission ID

40b534c3-9552-4550-901b-23879c90bcf9

Catalog state

Enabled

Read and write your organization's external identities policy

Allows the application to read and update the organization's external identities policy without a signed-in user. For example, external identities policy controls if users invited to access resources in your organization via B2B collaboration or B2B direct connect are allowed to self-service leave.

Permission ID

03cc4f92-788e-4ede-b93f-199424d144a5

Catalog state

Enabled

Read and write your organization's external identities policy

Allows the application to read and update the organization's external identities policy on behalf of the signed-in user. For example, external identities policy controls if users invited to access resources in your organization via B2B collaboration or B2B direct connect are allowed to self-service leave.

Permission ID

b5219784-1215-45b5-b3f1-88fe1081f9c0

Catalog state

Enabled

Read and write feature rollout policies

Allows the app to read and write feature rollout policies without a signed-in user. Includes abilities to assign and remove users and groups to rollout of a specific feature.

Permission ID

2044e4f1-e56c-435b-925c-44cd8f6ba89a

Catalog state

Enabled

Read and write your organization's feature rollout policies

Allows the app to read and write your organization's feature rollout policies on behalf of the signed-in user. Includes abilities to assign and remove users and groups to rollout of a specific feature.

Permission ID

92a38652-f13b-4875-bc77-6e1dbb63e1b2

Catalog state

Enabled

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID

90bbca0b-227c-4cdc-8083-1c6cfb95bac6

Catalog state

Enabled

Read and write your organization's federated token validation policy

Allows the application to read and update the organization's federated token validation policy on behalf of the signed-in user.

Permission ID

be1be369-4540-4ac9-8928-79de99f70d8f

Catalog state

Enabled

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID

2dcf8603-09eb-4078-b1ec-d30a1a76b873

Catalog state

Enabled

Read and write your organization’s identity protection policy

Allows the app to read and write your organization’s identity protection policy on behalf of the signed-in user.

Permission ID

7256e131-3efb-4323-9854-cf41c6021770

Catalog state

Enabled

Read and write your organization's mobility management policies

Allows the app to read and write your organization's mobility management policies on behalf of the signed-in user. For example, a mobility management policy can set the enrollment scope for a given mobility management application.

Permission ID

a8ead177-1889-4546-9387-f25e658e2a79

Catalog state

Enabled

Manage consent and permission grant policies

Allows the app to manage policies related to consent and permission grants for applications, without a signed-in user.

Permission ID

a402ca1c-2696-4531-972d-6e5ee4aa11ea

Catalog state

Enabled

Manage consent and permission grant policies

Allows the app to manage policies related to consent and permission grants for applications, on behalf of the signed-in user.

Permission ID

2672f8bb-fd5e-42e0-85e1-ec764dd2614e

Catalog state

Enabled

Read and write your organization's security defaults policy

Allows the app to read and write your organization's security defaults policy without a signed-in user.

Permission ID

1c6e93a6-28e2-4cbb-9f64-1a46a821124d

Catalog state

Enabled

Read and write your organization's security defaults policy

Allows the app to read and write your organization's security defaults policy without a signed-in user.

Permission ID

0b2a744c-2abf-4f1e-ad7e-17a087e2be99

Catalog state

Enabled

Read and write your organization's trust framework policies

Allows the app to read and write your organization's trust framework policies without a signed in user.

Permission ID

79a677f7-b79d-40d0-a36a-3e6f8688dd7a

Catalog state

Enabled