Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 259/260 feeds/APIs · 416/439 docs · checked 20:45 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Graph permissions

Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.

Public permission catalog

1132 matching definitions
Policy.ReadWrite.TrustFrameworkDelegatedAdmin consent

Read and write your organization's trust framework policies

Allows the app to read and write your organization's trust framework policies on behalf of the signed-in user.

Permission ID
cefba324-1a70-4a6e-9c1d-fd670b7ae392
Catalog state
Enabled
Microsoft permission reference
POP.AccessAsUser.AllDelegatedDelegated consent

Read and write access to mailboxes via POP

Allows the app to have the same access to mailboxes as the signed-in user via POP protocol.

Permission ID
d7b7f2d9-0f45-4ea1-9d42-e50810c06991
Catalog state
Enabled
Microsoft permission reference
Presence.ReadDelegatedDelegated consent

Read user's presence information

Allows the app to read presence information on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.

Permission ID
76bc735e-aecd-4a1d-8b4c-2b915deabb79
Catalog state
Enabled
Microsoft permission reference
Presence.Read.AllApplicationAdmin consent

Read presence information of all users in your organization

Allows the app to read presence information of all users in the directory without a signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.

Permission ID
a70e0c2d-e793-494c-94c4-118fa0a67f42
Catalog state
Enabled
Microsoft permission reference
Presence.Read.AllDelegatedDelegated consent

Read presence information of all users in your organization

Allows the app to read presence information of all users in the directory on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.

Permission ID
9c7a330d-35b3-4aa1-963d-cb2b9f927841
Catalog state
Enabled
Microsoft permission reference
Presence.ReadWriteDelegatedDelegated consent

Read and write a user's presence information

Allows the app to read the presence information and write activity and availability on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.

Permission ID
8d3c54a7-cf58-4773-bf81-c0cd6ad522bb
Catalog state
Enabled
Microsoft permission reference
Presence.ReadWrite.AllApplicationAdmin consent

Read and write presence information for all users

Allows the app to read all presence information and write activity and availability of all users in the directory without a signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, time zone and location.

Permission ID
83cded22-8297-4ff6-a7fa-e97e9545a259
Catalog state
Enabled
Microsoft permission reference
PrintConnector.Read.AllDelegatedAdmin consent

Read print connectors

Allows the application to read print connectors on behalf of the signed-in user.

Permission ID
d69c2d6d-4f72-4f99-a6b9-663e32f8cf68
Catalog state
Enabled
Microsoft permission reference
PrintConnector.ReadWrite.AllDelegatedAdmin consent

Read and write print connectors

Allows the application to read and write print connectors on behalf of the signed-in user.

Permission ID
79ef9967-7d59-4213-9c64-4b10687637d8
Catalog state
Enabled
Microsoft permission reference
Printer.CreateDelegatedAdmin consent

Register printers

Allows the application to create (register) printers on behalf of the signed-in user.

Permission ID
90c30bed-6fd1-4279-bf39-714069619721
Catalog state
Enabled
Microsoft permission reference
Printer.FullControl.AllDelegatedAdmin consent

Register, read, update, and unregister printers

Allows the application to create (register), read, update, and delete (unregister) printers on behalf of the signed-in user.

Permission ID
93dae4bd-43a1-4a23-9a1a-92957e1d9121
Catalog state
Enabled
Microsoft permission reference
Printer.Read.AllApplicationAdmin consent

Read printers

Allows the application to read printers without a signed-in user.

Permission ID
9709bb33-4549-49d4-8ed9-a8f65e45bb0f
Catalog state
Enabled
Microsoft permission reference
Printer.Read.AllDelegatedAdmin consent

Read printers

Allows the application to read printers on behalf of the signed-in user.

Permission ID
3a736c8a-018e-460a-b60c-863b2683e8bf
Catalog state
Enabled
Microsoft permission reference
Printer.ReadWrite.AllApplicationAdmin consent

Read and update printers

Allows the application to read and update printers without a signed-in user. Does not allow creating (registering) or deleting (unregistering) printers.

Permission ID
f5b3f73d-6247-44df-a74c-866173fddab0
Catalog state
Enabled
Microsoft permission reference
Printer.ReadWrite.AllDelegatedAdmin consent

Read and update printers

Allows the application to read and update printers on behalf of the signed-in user. Does not allow creating (registering) or deleting (unregistering) printers.

Permission ID
89f66824-725f-4b8f-928e-e1c5258dc565
Catalog state
Enabled
Microsoft permission reference
PrinterShare.Read.AllDelegatedDelegated consent

Read printer shares

Allows the application to read printer shares on behalf of the signed-in user.

Permission ID
ed11134d-2f3f-440d-a2e1-411efada2502
Catalog state
Enabled
Microsoft permission reference
PrinterShare.ReadBasic.AllDelegatedDelegated consent

Read basic information about printer shares

Allows the application to read basic information about printer shares on behalf of the signed-in user. Does not allow reading access control information.

Permission ID
5fa075e9-b951-4165-947b-c63396ff0a37
Catalog state
Enabled
Microsoft permission reference
PrinterShare.ReadWrite.AllDelegatedAdmin consent

Read and write printer shares

Allows the application to read and update printer shares on behalf of the signed-in user.

Permission ID
06ceea37-85e2-40d7-bec3-91337a46038f
Catalog state
Enabled
Microsoft permission reference
PrintJob.CreateDelegatedDelegated consent

Create print jobs

Allows the application to create print jobs on behalf of the signed-in user and upload document content to print jobs that the signed-in user created.

Permission ID
21f0d9c0-9f13-48b3-94e0-b6b231c7d320
Catalog state
Enabled
Microsoft permission reference
PrintJob.Manage.AllApplicationAdmin consent

Perform advanced operations on print jobs

Allows the application to perform advanced operations like redirecting a print job to another printer without a signed-in user. Also allows the application to read and update the metadata of print jobs.

Permission ID
58a52f47-9e36-4b17-9ebe-ce4ef7f3e6c8
Catalog state
Enabled
Microsoft permission reference
PrintJob.ReadDelegatedDelegated consent

Read user's print jobs

Allows the application to read the metadata and document content of print jobs that the signed-in user created.

Permission ID
248f5528-65c0-4c88-8326-876c7236df5e
Catalog state
Enabled
Microsoft permission reference
PrintJob.Read.AllApplicationAdmin consent

Read print jobs

Allows the application to read the metadata and document content of print jobs without a signed-in user.

Permission ID
ac6f956c-edea-44e4-bd06-64b1b4b9aec9
Catalog state
Enabled
Microsoft permission reference
PrintJob.Read.AllDelegatedAdmin consent

Read print jobs

Allows the application to read the metadata and document content of print jobs on behalf of the signed-in user.

Permission ID
afdd6933-a0d8-40f7-bd1a-b5d778e8624b
Catalog state
Enabled
Microsoft permission reference
PrintJob.ReadBasicDelegatedDelegated consent

Read basic information of user's print jobs

Allows the application to read the metadata of print jobs that the signed-in user created. Does not allow access to print job document content.

Permission ID
6a71a747-280f-4670-9ca0-a9cbf882b274
Catalog state
Enabled
Microsoft permission reference
PrintJob.ReadBasic.AllApplicationAdmin consent

Read basic information for print jobs

Allows the application to read the metadata of print jobs without a signed-in user. Does not allow access to print job document content.

Permission ID
fbf67eee-e074-4ef7-b965-ab5ce1c1f689
Catalog state
Enabled
Microsoft permission reference

Source: Microsoft Graph public permission definitions.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 21 Oct 20:45 UTC · 259 of 260 readable · 257 fully read · documentation 416/439 current