Microsoft Graph permissions
Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.
Public permission catalog
1132 matching definitionsPrivilegedAssignmentSchedule.ReadWrite.AzureADGroupApplicationAdmin consent
Read, create, and delete assignment schedules for access to Azure AD groups
Allows the app to read, create, and delete time-based assignment schedules for access to Azure AD groups, without a signed-in user.
- Permission ID
- 41202f2c-f7ab-45be-b001-85c9728b9d69
- Catalog state
- Enabled
PrivilegedAssignmentSchedule.ReadWrite.AzureADGroupDelegatedAdmin consent
Read, create, and delete assignment schedules for access to Azure AD groups
Allows the app to read, create, and delete time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user.
- Permission ID
- 06dbc45d-6708-4ef0-a797-f797ee68bf4b
- Catalog state
- Enabled
PrivilegedAssignmentSchedule.Remove.AzureADGroupApplicationAdmin consent
Delete assignment schedules for access to Azure AD groups
Delete time-based assignment schedules for access to Azure AD groups, without a signed-in user.
- Permission ID
- 55d1104b-3821-413d-b3ca-e2393d333cd3
- Catalog state
- Enabled
PrivilegedAssignmentSchedule.Remove.AzureADGroupDelegatedAdmin consent
Delete assignment schedules for access to Azure AD groups
Allows the app to delete time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user.
- Permission ID
- ca5fe595-68ff-4dfd-907d-4509501a0e49
- Catalog state
- Enabled
PrivilegedEligibilitySchedule.Read.AzureADGroupApplicationAdmin consent
Read eligibility schedules for access to Azure AD groups
Allows the app to read time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.
- Permission ID
- edb419d6-7edc-42a3-9345-509bfdf5d87c
- Catalog state
- Enabled
PrivilegedEligibilitySchedule.Read.AzureADGroupDelegatedAdmin consent
Read eligibility schedules for access to Azure AD groups
Allows the app to read time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.
- Permission ID
- 8f44f93d-ecef-46ae-a9bf-338508d44d6b
- Catalog state
- Enabled
PrivilegedEligibilitySchedule.ReadWrite.AzureADGroupApplicationAdmin consent
Read, create, and delete eligibility schedules for access to Azure AD groups
Allows the app to read, create, and delete time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.
- Permission ID
- 618b6020-bca8-4de6-99f6-ef445fa4d857
- Catalog state
- Enabled
PrivilegedEligibilitySchedule.ReadWrite.AzureADGroupDelegatedAdmin consent
Read, create, and delete eligibility schedules for access to Azure AD groups
Allows the app to read, create, and delete time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.
- Permission ID
- ba974594-d163-484e-ba39-c330d5897667
- Catalog state
- Enabled
PrivilegedEligibilitySchedule.Remove.AzureADGroupApplicationAdmin consent
Delete eligibility schedules for access to Azure AD groups
Delete time-based eligibility schedules for access to Azure AD groups, without a signed-in user.
- Permission ID
- 55745561-7572-4314-a737-a2c2a1b0dd2e
- Catalog state
- Enabled
PrivilegedEligibilitySchedule.Remove.AzureADGroupDelegatedAdmin consent
Delete eligibility schedules for access to Azure AD groups
Allows the app to delete time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user.
- Permission ID
- c5ea9ab4-9b41-4c09-a400-53e652fb5096
- Catalog state
- Enabled
profileDelegatedDelegated consent
View users' basic profile
Allows the app to see your users' basic profile (e.g., name, picture, user name, email address)
- Permission ID
- 14dad69e-099b-42c9-810b-d002981feec1
- Catalog state
- Enabled
ProfilePhoto.Read.AllApplicationAdmin consent
Read profile photo of a user or group
Allows the app to read all profile photos of users and groups, without a signed-in user
- Permission ID
- e24d31aa-e1ab-4c80-85fe-23018690335d
- Catalog state
- Enabled
ProfilePhoto.Read.AllDelegatedAdmin consent
Read profile photo of a user or group
Allows the app to read all profile photos of users and groups, on behalf of the the signed-in user.
- Permission ID
- 469cd065-729e-4dee-b1fa-d92e0fab6310
- Catalog state
- Enabled
ProfilePhoto.ReadWrite.AllApplicationAdmin consent
Read and write profile photo of a user or group
Allows the app to read and write all profile photos of users and groups, without a signed-in user
- Permission ID
- 27baa7f6-5dfb-4ba8-b1d3-1e812c143013
- Catalog state
- Enabled
ProfilePhoto.ReadWrite.AllDelegatedAdmin consent
Read and write profile photo of a user or group
Allows the app to read and write all profile photos of users and groups, on behalf of the the signed-in user.
- Permission ID
- f5b24df7-511e-48bb-ae88-643f023b55e1
- Catalog state
- Enabled
ProgramControl.Read.AllApplicationAdmin consent
Read all programs
Allows the app to read programs and program controls in the organization, without a signed-in user.
- Permission ID
- eedb7fdd-7539-4345-a38b-4839e4a84cbd
- Catalog state
- Enabled
ProgramControl.Read.AllDelegatedAdmin consent
Read all programs that user can access
Allows the app to read programs and program controls that the signed-in user has access to in the organization.
- Permission ID
- c492a2e1-2f8f-4caa-b076-99bbf6e40fe4
- Catalog state
- Enabled
ProgramControl.ReadWrite.AllApplicationAdmin consent
Manage all programs
Allows the app to read, update, delete and perform actions on programs and program controls in the organization, without a signed-in user.
- Permission ID
- 60a901ed-09f7-4aa5-a16e-7dd3d6f9de36
- Catalog state
- Enabled
ProgramControl.ReadWrite.AllDelegatedAdmin consent
Manage all programs that user can access
Allows the app to read, update, delete and perform actions on programs and program controls that the signed-in user has access to in the organization.
- Permission ID
- 50fd364f-9d93-4ae1-b170-300e87cccf84
- Catalog state
- Enabled
PublicKeyInfrastructure.Read.AllApplicationAdmin consent
Read all certificate based authentication configurations
Allows the application to read certificate-based authentication configuration such as all public key infrastructures (PKI) and certificate authorities (CA) configured for the organization, without a signed-in user.
- Permission ID
- 214fda0c-514a-4650-b037-b562b1a66124
- Catalog state
- Enabled
PublicKeyInfrastructure.Read.AllDelegatedAdmin consent
Read all certificate based authentication configurations
Allows the application to read certificate-based authentication configuration such as all public key infrastructures (PKI) and certificate authorities (CA) configured for the organization, on behalf of the signed-in user.
- Permission ID
- 04a4b2a2-3f26-4fc8-87ee-9c46e68db175
- Catalog state
- Enabled
PublicKeyInfrastructure.ReadWrite.AllApplicationAdmin consent
Read and write all certificate based authentication configurations
Allows the application to read and write certificate-based authentication configuration such as all public key infrastructures (PKI) and certificate authorities (CA) configured for the organization, without a signed-in user.
- Permission ID
- a2b63618-5350-462d-b1b3-ba6eb3684e26
- Catalog state
- Enabled
PublicKeyInfrastructure.ReadWrite.AllDelegatedAdmin consent
Read and write all certificate based authentication configurations
Allows the application to read and write certificate-based authentication configuration such as all public key infrastructures (PKI) and certificate authorities (CA) configured for the organization, on behalf of the signed-in user.
- Permission ID
- 3591b7f3-dba8-4bad-b667-7a64bd4f2b83
- Catalog state
- Enabled
QnA.Read.AllApplicationAdmin consent
No display name in the catalog
Microsoft supplies no description in this catalog.
- Permission ID
- ee49e170-1dd1-4030-b44c-61ad6e98f743
- Catalog state
- Enabled
QnA.Read.AllDelegatedDelegated consent
Read all Questions and Answers that the user can access
Allows an app to read all question and answer sets that the signed-in user can access.
- Permission ID
- f73fa04f-b9a5-4df9-8843-993ce928925e
- Catalog state
- Enabled