Microsoft Graph permissions
Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.
Public permission catalog
1132 matching definitionsAttackSimulation.ReadWrite.AllDelegatedDelegated consent
Read, create, and update attack simulation data of an organization
Allows the app to read, create, and update attack simulation and training data for an organization for the signed-in user.
- Permission ID
- 27608d7c-2c66-4cad-a657-951d575f5a60
- Catalog state
- Enabled
AuditLog.Read.AllApplicationAdmin consent
Read all audit log data
Allows the app to read and query your audit log activities, without a signed-in user.
- Permission ID
- b0afded3-3588-46d8-8b3d-9842eff778da
- Catalog state
- Enabled
AuditLog.Read.AllDelegatedAdmin consent
Read audit log data
Allows the app to read and query your audit log activities, on behalf of the signed-in user.
- Permission ID
- e4c9e354-4dc5-45b8-9e7c-e1393b0b1a20
- Catalog state
- Enabled
AuditLogsQuery-CRM.Read.AllApplicationAdmin consent
Read audit logs data from Dynamics CRM service
Allows the app to read and query audit logs from Dynamics CRM service.
- Permission ID
- 20e6f8e4-ffac-4cf7-82f7-70ddb7564318
- Catalog state
- Enabled
AuditLogsQuery-CRM.Read.AllDelegatedAdmin consent
Read audit logs data from Dynamics CRM workload
Allows the app to read and query audit logs from Dynamics CRM workload, on behalf of a signed-in user.
- Permission ID
- ba78b16f-1e01-41b6-89ca-73e0a32b304c
- Catalog state
- Enabled
AuditLogsQuery-Endpoint.Read.AllApplicationAdmin consent
Read audit logs data from Endpoint Data Loss Prevention workload
Allows the app to read and query audit logs from Endpoint Data Loss Prevention workload.
- Permission ID
- 0bc85aed-7b0b-437a-bac8-3b29a1b84c99
- Catalog state
- Enabled
AuditLogsQuery-Endpoint.Read.AllDelegatedAdmin consent
Read audit logs data from Endpoint Data Loss Prevention workload
Allows the app to read and query audit logs from Endpoint Data Loss Prevention workload, on behalf of a signed-in user.
- Permission ID
- ee3409fe-617f-43cf-bd1e-fc8b38049e69
- Catalog state
- Enabled
AuditLogsQuery-Entra.Read.AllApplicationAdmin consent
Read audit logs data from Entra service
Allows the app to read and query audit logs from Entra service.
- Permission ID
- 7276d950-48fc-4269-8348-f22f2bb296d0
- Catalog state
- Enabled
AuditLogsQuery-Entra.Read.AllDelegatedAdmin consent
Read audit logs data from Entra service
Allows the app to read and query audit logs from Entra service, on behalf of a signed-in user.
- Permission ID
- 5ff2f415-e0f1-4d11-bfd0-6d87c0f667fd
- Catalog state
- Enabled
AuditLogsQuery-Exchange.Read.AllApplicationAdmin consent
Read audit logs data from Exchange service
Allows the app to read and query audit logs from Exchange service.
- Permission ID
- 6b0d2622-d34e-4470-935b-b96550e5ca8d
- Catalog state
- Enabled
AuditLogsQuery-Exchange.Read.AllDelegatedAdmin consent
Read audit logs data from Exchange workload
Allows the app to read and query audit logs from Exchange workload, on behalf of a signed-in user.
- Permission ID
- 6c8c71d2-c7e1-45b0-ac6d-1d2724fba6ae
- Catalog state
- Enabled
AuditLogsQuery-OneDrive.Read.AllApplicationAdmin consent
Read audit logs data from OneDrive service
Allows the app to read and query audit logs from OneDrive service.
- Permission ID
- 8a169a81-841c-45fd-ad43-96aede8801a0
- Catalog state
- Enabled
AuditLogsQuery-OneDrive.Read.AllDelegatedAdmin consent
Read audit logs data from OneDrive workload
Allows the app to read and query audit logs from OneDrive workload, on behalf of a signed-in user.
- Permission ID
- 4a72c235-a50d-4870-b598-fd88fd1fa074
- Catalog state
- Enabled
AuditLogsQuery-SharePoint.Read.AllApplicationAdmin consent
Read audit logs data from SharePoint service
Allows the app to read and query audit logs from SharePoint service.
- Permission ID
- 91c64a47-a524-4fce-9bf3-3d569a344ecf
- Catalog state
- Enabled
AuditLogsQuery-SharePoint.Read.AllDelegatedAdmin consent
Read audit logs data from SharePoint workload
Allows the app to read and query audit logs from SharePoint workload, on behalf of a signed-in user.
- Permission ID
- 30630b65-ed12-4a81-9130-e3a964109fae
- Catalog state
- Enabled
AuditLogsQuery.Read.AllApplicationAdmin consent
Read audit logs data from all services
Allows the app to read and query audit logs from all services.
- Permission ID
- 5e1e9171-754d-478c-812c-f1755a9a4c2d
- Catalog state
- Enabled
AuditLogsQuery.Read.AllDelegatedAdmin consent
Read audit logs data from all services
Allows the app to read and query audit logs from all services, on behalf of a signed-in user
- Permission ID
- 1d9e7ac3-0eca-442c-82f9-e92625af6e6d
- Catalog state
- Enabled
AuthenticationContext.Read.AllApplicationAdmin consent
Read all authentication context information
Allows the app to read the authentication context information in your organization, without a signed-in user.
- Permission ID
- 381f742f-e1f8-4309-b4ab-e3d91ae4c5c1
- Catalog state
- Enabled
AuthenticationContext.Read.AllDelegatedAdmin consent
Read all authentication context information
Allows the app to read all authentication context information in your organization on behalf of the signed-in user.
- Permission ID
- 57b030f1-8c35-469c-b0d9-e4a077debe70
- Catalog state
- Enabled
AuthenticationContext.ReadWrite.AllApplicationAdmin consent
Read and write all authentication context information
Allows the app to read and update the authentication context information in your organization, without a signed-in user.
- Permission ID
- a88eef72-fed0-4bf7-a2a9-f19df33f8b83
- Catalog state
- Enabled
AuthenticationContext.ReadWrite.AllDelegatedAdmin consent
Read and write all authentication context information
Allows the app to read and update all authentication context information in your organization on behalf of the signed-in user.
- Permission ID
- ba6d575a-1344-4516-b777-1404f5593057
- Catalog state
- Enabled
BackupRestore-Configuration.Read.AllApplicationAdmin consent
Read backup configuration policies
Allows the app to read all backup configurations, and lists of Microsoft 365 service resources to be backed up, without a signed-in user.
- Permission ID
- 5fbb5982-3230-4882-93c0-2167523ce0c2
- Catalog state
- Enabled
BackupRestore-Configuration.Read.AllDelegatedAdmin consent
Read backup configuration policies
Allows the app to read the backup configuration, and list of Microsoft 365 service resources to be backed up, on behalf of the signed in user.
- Permission ID
- 444ed4b6-0554-4dc6-8e9c-3f9a34ee3ff6
- Catalog state
- Enabled
BackupRestore-Configuration.ReadWrite.AllApplicationAdmin consent
Read and edit backup configuration policies
Allows the app to read and update the backup configuration, and list of Microsoft 365 service resources to be backed up, without a signed-in user.
- Permission ID
- 18133149-5489-40ac-80f0-4b6fa85f6cdc
- Catalog state
- Enabled
BackupRestore-Configuration.ReadWrite.AllDelegatedAdmin consent
Read and edit backup configuration policies
Allows the app to read and update the backup configuration, and list of Microsoft 365 service resources to be backed up, on behalf of the signed in user.
- Permission ID
- a0244d16-171c-4496-8ffb-7b9b6954d339
- Catalog state
- Enabled