Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 415/439 docs · checked 23:56 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Graph permissions

Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.

Public permission catalog

1132 matching definitions
AttackSimulation.ReadWrite.AllDelegatedDelegated consent

Read, create, and update attack simulation data of an organization

Allows the app to read, create, and update attack simulation and training data for an organization for the signed-in user.

Permission ID
27608d7c-2c66-4cad-a657-951d575f5a60
Catalog state
Enabled
Microsoft permission reference
AuditLog.Read.AllApplicationAdmin consent

Read all audit log data

Allows the app to read and query your audit log activities, without a signed-in user.

Permission ID
b0afded3-3588-46d8-8b3d-9842eff778da
Catalog state
Enabled
Microsoft permission reference
AuditLog.Read.AllDelegatedAdmin consent

Read audit log data

Allows the app to read and query your audit log activities, on behalf of the signed-in user.

Permission ID
e4c9e354-4dc5-45b8-9e7c-e1393b0b1a20
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery-CRM.Read.AllApplicationAdmin consent

Read audit logs data from Dynamics CRM service

Allows the app to read and query audit logs from Dynamics CRM service.

Permission ID
20e6f8e4-ffac-4cf7-82f7-70ddb7564318
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery-CRM.Read.AllDelegatedAdmin consent

Read audit logs data from Dynamics CRM workload

Allows the app to read and query audit logs from Dynamics CRM workload, on behalf of a signed-in user.

Permission ID
ba78b16f-1e01-41b6-89ca-73e0a32b304c
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery-Endpoint.Read.AllApplicationAdmin consent

Read audit logs data from Endpoint Data Loss Prevention workload

Allows the app to read and query audit logs from Endpoint Data Loss Prevention workload.

Permission ID
0bc85aed-7b0b-437a-bac8-3b29a1b84c99
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery-Endpoint.Read.AllDelegatedAdmin consent

Read audit logs data from Endpoint Data Loss Prevention workload

Allows the app to read and query audit logs from Endpoint Data Loss Prevention workload, on behalf of a signed-in user.

Permission ID
ee3409fe-617f-43cf-bd1e-fc8b38049e69
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery-Entra.Read.AllApplicationAdmin consent

Read audit logs data from Entra service

Allows the app to read and query audit logs from Entra service.

Permission ID
7276d950-48fc-4269-8348-f22f2bb296d0
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery-Entra.Read.AllDelegatedAdmin consent

Read audit logs data from Entra service

Allows the app to read and query audit logs from Entra service, on behalf of a signed-in user.

Permission ID
5ff2f415-e0f1-4d11-bfd0-6d87c0f667fd
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery-Exchange.Read.AllApplicationAdmin consent

Read audit logs data from Exchange service

Allows the app to read and query audit logs from Exchange service.

Permission ID
6b0d2622-d34e-4470-935b-b96550e5ca8d
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery-Exchange.Read.AllDelegatedAdmin consent

Read audit logs data from Exchange workload

Allows the app to read and query audit logs from Exchange workload, on behalf of a signed-in user.

Permission ID
6c8c71d2-c7e1-45b0-ac6d-1d2724fba6ae
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery-OneDrive.Read.AllApplicationAdmin consent

Read audit logs data from OneDrive service

Allows the app to read and query audit logs from OneDrive service.

Permission ID
8a169a81-841c-45fd-ad43-96aede8801a0
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery-OneDrive.Read.AllDelegatedAdmin consent

Read audit logs data from OneDrive workload

Allows the app to read and query audit logs from OneDrive workload, on behalf of a signed-in user.

Permission ID
4a72c235-a50d-4870-b598-fd88fd1fa074
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery-SharePoint.Read.AllApplicationAdmin consent

Read audit logs data from SharePoint service

Allows the app to read and query audit logs from SharePoint service.

Permission ID
91c64a47-a524-4fce-9bf3-3d569a344ecf
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery-SharePoint.Read.AllDelegatedAdmin consent

Read audit logs data from SharePoint workload

Allows the app to read and query audit logs from SharePoint workload, on behalf of a signed-in user.

Permission ID
30630b65-ed12-4a81-9130-e3a964109fae
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery.Read.AllApplicationAdmin consent

Read audit logs data from all services

Allows the app to read and query audit logs from all services.

Permission ID
5e1e9171-754d-478c-812c-f1755a9a4c2d
Catalog state
Enabled
Microsoft permission reference
AuditLogsQuery.Read.AllDelegatedAdmin consent

Read audit logs data from all services

Allows the app to read and query audit logs from all services, on behalf of a signed-in user

Permission ID
1d9e7ac3-0eca-442c-82f9-e92625af6e6d
Catalog state
Enabled
Microsoft permission reference
AuthenticationContext.Read.AllApplicationAdmin consent

Read all authentication context information

Allows the app to read the authentication context information in your organization, without a signed-in user.

Permission ID
381f742f-e1f8-4309-b4ab-e3d91ae4c5c1
Catalog state
Enabled
Microsoft permission reference
AuthenticationContext.Read.AllDelegatedAdmin consent

Read all authentication context information

Allows the app to read all authentication context information in your organization on behalf of the signed-in user.

Permission ID
57b030f1-8c35-469c-b0d9-e4a077debe70
Catalog state
Enabled
Microsoft permission reference
AuthenticationContext.ReadWrite.AllApplicationAdmin consent

Read and write all authentication context information

Allows the app to read and update the authentication context information in your organization, without a signed-in user.

Permission ID
a88eef72-fed0-4bf7-a2a9-f19df33f8b83
Catalog state
Enabled
Microsoft permission reference
AuthenticationContext.ReadWrite.AllDelegatedAdmin consent

Read and write all authentication context information

Allows the app to read and update all authentication context information in your organization on behalf of the signed-in user.

Permission ID
ba6d575a-1344-4516-b777-1404f5593057
Catalog state
Enabled
Microsoft permission reference
BackupRestore-Configuration.Read.AllApplicationAdmin consent

Read backup configuration policies

Allows the app to read all backup configurations, and lists of Microsoft 365 service resources to be backed up, without a signed-in user.

Permission ID
5fbb5982-3230-4882-93c0-2167523ce0c2
Catalog state
Enabled
Microsoft permission reference
BackupRestore-Configuration.Read.AllDelegatedAdmin consent

Read backup configuration policies

Allows the app to read the backup configuration, and list of Microsoft 365 service resources to be backed up, on behalf of the signed in user.

Permission ID
444ed4b6-0554-4dc6-8e9c-3f9a34ee3ff6
Catalog state
Enabled
Microsoft permission reference
BackupRestore-Configuration.ReadWrite.AllApplicationAdmin consent

Read and edit backup configuration policies

Allows the app to read and update the backup configuration, and list of Microsoft 365 service resources to be backed up, without a signed-in user.

Permission ID
18133149-5489-40ac-80f0-4b6fa85f6cdc
Catalog state
Enabled
Microsoft permission reference
BackupRestore-Configuration.ReadWrite.AllDelegatedAdmin consent

Read and edit backup configuration policies

Allows the app to read and update the backup configuration, and list of Microsoft 365 service resources to be backed up, on behalf of the signed in user.

Permission ID
a0244d16-171c-4496-8ffb-7b9b6954d339
Catalog state
Enabled
Microsoft permission reference

Source: Microsoft Graph public permission definitions.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 20 Oct 23:56 UTC · 258 of 260 readable · 256 fully read · documentation 415/439 current