Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 259/260 feeds/APIs · 416/439 docs · checked 21:46 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Graph permissions

Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.

Public permission catalog

1132 matching definitions
PrintJob.ReadBasic.AllDelegatedAdmin consent

Read basic information of print jobs

Allows the application to read the metadata of print jobs on behalf of the signed-in user. Does not allow access to print job document content.

Permission ID
04ce8d60-72ce-4867-85cf-6d82f36922f3
Catalog state
Enabled
Microsoft permission reference
PrintJob.ReadWriteDelegatedDelegated consent

Read and write user's print jobs

Allows the application to read and update the metadata and document content of print jobs that the signed-in user created.

Permission ID
b81dd597-8abb-4b3f-a07a-820b0316ed04
Catalog state
Enabled
Microsoft permission reference
PrintJob.ReadWrite.AllApplicationAdmin consent

Read and write print jobs

Allows the application to read and update the metadata and document content of print jobs without a signed-in user.

Permission ID
5114b07b-2898-4de7-a541-53b0004e2e13
Catalog state
Enabled
Microsoft permission reference
PrintJob.ReadWrite.AllDelegatedAdmin consent

Read and write print jobs

Allows the application to read and update the metadata and document content of print jobs on behalf of the signed-in user.

Permission ID
036b9544-e8c5-46ef-900a-0646cc42b271
Catalog state
Enabled
Microsoft permission reference
PrintJob.ReadWriteBasicDelegatedDelegated consent

Read and write basic information of user's print jobs

Allows the application to read and update the metadata of print jobs that the signed-in user created. Does not allow access to print job document content.

Permission ID
6f2d22f2-1cb6-412c-a17c-3336817eaa82
Catalog state
Enabled
Microsoft permission reference
PrintJob.ReadWriteBasic.AllApplicationAdmin consent

Read and write basic information for print jobs

Allows the application to read and update the metadata of print jobs without a signed-in user. Does not allow access to print job document content.

Permission ID
57878358-37f4-4d3a-8c20-4816e0d457b1
Catalog state
Enabled
Microsoft permission reference
PrintJob.ReadWriteBasic.AllDelegatedAdmin consent

Read and write basic information of print jobs

Allows the application to read and update the metadata of print jobs on behalf of the signed-in user. Does not allow access to print job document content.

Permission ID
3a0db2f6-0d2a-4c19-971b-49109b19ad3d
Catalog state
Enabled
Microsoft permission reference
PrintSettings.Read.AllApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
b5991872-94cf-4652-9765-29535087c6d8
Catalog state
Enabled
Microsoft permission reference
PrintSettings.Read.AllDelegatedAdmin consent

Read tenant-wide print settings

Allows the application to read tenant-wide print settings on behalf of the signed-in user.

Permission ID
490f32fd-d90f-4dd7-a601-ff6cdc1a3f6c
Catalog state
Enabled
Microsoft permission reference
PrintSettings.ReadWrite.AllDelegatedAdmin consent

Read and write tenant-wide print settings

Allows the application to read and write tenant-wide print settings on behalf of the signed-in user.

Permission ID
9ccc526a-c51c-4e5c-a1fd-74726ef50b8f
Catalog state
Enabled
Microsoft permission reference
PrintTaskDefinition.ReadWrite.AllApplicationAdmin consent

Read, write and update print task definitions

Allows the application to read and update print task definitions without a signed-in user.

Permission ID
456b71a7-0ee0-4588-9842-c123fcc8f664
Catalog state
Enabled
Microsoft permission reference
PrivilegedAccess.Read.AzureADApplicationAdmin consent

Read privileged access to Azure AD roles

Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD built-in and custom administrative roles in your organization, without a signed-in user.

Permission ID
4cdc2547-9148-4295-8d11-be0db1391d6b
Catalog state
Enabled
Microsoft permission reference
PrivilegedAccess.Read.AzureADDelegatedAdmin consent

Read privileged access to Azure AD

Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD built-in and custom administrative roles, on behalf of the signed-in user.

Permission ID
b3a539c9-59cb-4ad5-825a-041ddbdc2bdb
Catalog state
Enabled
Microsoft permission reference
PrivilegedAccess.Read.AzureADGroupApplicationAdmin consent

Read privileged access to Azure AD groups

Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups in your organization, without a signed-in user.

Permission ID
01e37dc9-c035-40bd-b438-b2879c4870a6
Catalog state
Enabled
Microsoft permission reference
PrivilegedAccess.Read.AzureADGroupDelegatedAdmin consent

Read privileged access to Azure AD groups

Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on behalf of the signed-in user.

Permission ID
d329c81c-20ad-4772-abf9-3f6fdb7e5988
Catalog state
Enabled
Microsoft permission reference
PrivilegedAccess.Read.AzureResourcesApplicationAdmin consent

Read privileged access to Azure resources

Allows the app to read time-based assignment and just-in-time elevation of user privileges to audit Azure resources in your organization, without a signed-in user.

Permission ID
5df6fe86-1be0-44eb-b916-7bd443a71236
Catalog state
Enabled
Microsoft permission reference
PrivilegedAccess.Read.AzureResourcesDelegatedAdmin consent

Read privileged access to Azure resources

Allows the app to read time-based assignment and just-in-time elevation of Azure resources (like your subscriptions, resource groups, storage, compute) on behalf of the signed-in user.

Permission ID
1d89d70c-dcac-4248-b214-903c457af83a
Catalog state
Enabled
Microsoft permission reference
PrivilegedAccess.ReadWrite.AzureADApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
854d9ab1-6657-4ec8-be45-823027bcd009
Catalog state
Enabled
Microsoft permission reference
PrivilegedAccess.ReadWrite.AzureADDelegatedAdmin consent

Read and write privileged access to Azure AD

Allows the app to request and manage just in time elevation (including scheduled elevation) of users to Azure AD built-in administrative roles, on behalf of signed-in users.

Permission ID
3c3c74f5-cdaa-4a97-b7e0-4e788bfcfb37
Catalog state
Enabled
Microsoft permission reference
PrivilegedAccess.ReadWrite.AzureADGroupApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
2f6817f8-7b12-4f0f-bc18-eeaf60705a9e
Catalog state
Enabled
Microsoft permission reference
PrivilegedAccess.ReadWrite.AzureADGroupDelegatedAdmin consent

Read and write privileged access to Azure AD groups

Allows the app to request and manage time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on behalf of the signed-in user.

Permission ID
32531c59-1f32-461f-b8df-6f8a3b89f73b
Catalog state
Enabled
Microsoft permission reference
PrivilegedAccess.ReadWrite.AzureResourcesApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
6f9d5abc-2db6-400b-a267-7de22a40fb87
Catalog state
Enabled
Microsoft permission reference
PrivilegedAccess.ReadWrite.AzureResourcesDelegatedAdmin consent

Read and write privileged access to Azure resources

Allows the app to request and manage time-based assignment and just-in-time elevation of user privileges to manage Azure resources (like subscriptions, resource groups, storage, compute) on behalf of the signed-in users.

Permission ID
a84a9652-ffd3-496e-a991-22ba5529156a
Catalog state
Enabled
Microsoft permission reference
PrivilegedAssignmentSchedule.Read.AzureADGroupApplicationAdmin consent

Read assignment schedules for access to Azure AD groups

Allows the app to read time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user.

Permission ID
cd4161cb-f098-48f8-a884-1eda9a42434c
Catalog state
Enabled
Microsoft permission reference
PrivilegedAssignmentSchedule.Read.AzureADGroupDelegatedAdmin consent

Read assignment schedules for access to Azure AD groups

Allows the app to read time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user.

Permission ID
02a32cc4-7ab5-4b58-879a-0586e0f7c495
Catalog state
Enabled
Microsoft permission reference

Source: Microsoft Graph public permission definitions.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 21 Oct 21:46 UTC · 259 of 260 readable · 257 fully read · documentation 416/439 current