Microsoft Graph permissions

Read Records Management configuration, labels and policies

Allows the application to read any data from Records Management, such as configuration, labels, and policies without the signed in user.

Permission ID

ac3a2b8e-03a3-4da9-9ce0-cbe28bf1accd

Catalog state

Enabled

Read Records Management configuration, labels, and policies

Allows the application to read any data from Records Management, such as configuration, labels, and policies on behalf of the signed-in user.

Permission ID

07f995eb-fc67-4522-ad66-2b8ca8ea3efd

Catalog state

Enabled

Read and write Records Management configuration, labels and policies

Allow the application to create, update and delete any data from Records Management, such as configuration, labels, and policies without the signed in user.

Permission ID

eb158f57-df43-4751-8b21-b8932adb3d34

Catalog state

Enabled

Read and write Records Management configuration, labels, and policies

Allow the application to create, update and delete any data from Records Management, such as configuration, labels, and policies on behalf of the signed-in user.

Permission ID

f2833d75-a4e6-40ab-86d4-6dfe73c97605

Catalog state

Enabled

Read all usage reports

Allows an app to read all service usage reports without a signed-in user. Services that provide usage reports include Office 365 and Azure Active Directory.

Permission ID

230c1aed-a721-4c5d-9cb4-a90514e508ef

Catalog state

Enabled

Read all usage reports

Allows an app to read all service usage reports on behalf of the signed-in user. Services that provide usage reports include Office 365 and Azure Active Directory.

Permission ID

02e97553-ed7b-43d0-ab3c-f8bace0d040c

Catalog state

Enabled

Read all admin report settings

Allows the app to read all admin report settings, such as whether to display concealed information in reports, without a signed-in user.

Permission ID

ee353f83-55ef-4b78-82da-555bfa2b4b95

Catalog state

Enabled

Read admin report settings

Allows the app to read admin report settings, such as whether to display concealed information in reports, on behalf of the signed-in user

Permission ID

84fac5f4-33a9-4100-aa38-a20c6d29e5e7

Catalog state

Enabled

Read and write all admin report settings

Allows the app to read and update all admin report settings, such as whether to display concealed information in reports, without a signed-in user.

Permission ID

2a60023f-3219-47ad-baa4-40e17cd02a1d

Catalog state

Enabled

Read and write admin report settings

Allows the app to read and update admin report settings, such as whether to display concealed information in reports, on behalf of the signed-in user.

Permission ID

b955410e-7715-4a88-a940-dfd551018df3

Catalog state

Enabled

Read resource specific permissions granted on a chat

Allows the app to read the resource specific permissions granted on the chat, on behalf of the signed-in user.

Permission ID

cb530fca-534b-4e72-aa74-bca7e8bbd06f

Catalog state

Enabled

Read resource specific permissions granted on a chat

Allows the app to read the resource specific permissions granted on the chat without a signed-in user.

Permission ID

2ff643d8-43e4-4a9b-88c1-86cb4a4b4c2f

Catalog state

Enabled

Read resource specific permissions granted on a team

Allows the app to read the resource specific permissions granted on the team, on behalf of the signed-in user.

Permission ID

eafad40c-bf7a-415a-b7f8-acdf5706b58f

Catalog state

Enabled

Read resource specific permissions granted on a team

Allows the app to read the resource specific permissions granted on the team without a signed-in user.

Permission ID

ad4600ae-d900-42cb-a9a2-2415d05593d0

Catalog state

Enabled

Read resource specific permissions granted on a user account

Allows the app to read the resource specific permissions granted on a user account, on behalf of the signed-in user.

Permission ID

f1d91a8f-88e7-4774-8401-b668d5bca0c5

Catalog state

Enabled

Read all resource specific permissions granted on user accounts

Allows the app to read all resource specific permissions granted on user accounts, without a signed-in user.

Permission ID

acfca4d5-f49f-40ed-9648-84068b474c73

Catalog state

Enabled

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID

2a6baefd-edea-4ff6-b24e-bebcaa27a50d

Catalog state

Enabled

Read all identity risk prevention providers

Allows the app to read your organization's risk prevention providers, on behalf of the signed-in user.

Permission ID

e197c06f-ae7b-4398-b0a2-89f76ebca159

Catalog state

Enabled

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID

7fc7225d-eb37-4c39-90f3-a33a57cf1081

Catalog state

Enabled

Read and write all identity risk prevention providers

Allows the app to read and write your organization's risk prevention providers, on behalf of the signed-in user.

Permission ID

2a7babba-9623-4109-bc9c-79728cf3bb4f

Catalog state

Enabled

Read all active role assignments and role schedules for your company's directory

Allows the app to read the active role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes reading directory role templates, and directory roles.

Permission ID

d5fe8ce8-684c-4c83-a52c-46e882ce4be1

Catalog state

Enabled

Read all active role assignments for your company's directory

Allows the app to read the active role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, and directory roles.

Permission ID

344a729c-0285-42c6-9014-f12b9b8d6129

Catalog state

Enabled

Read, update, and delete all policies for privileged role assignments of your company's directory

Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, without a signed-in user.

Permission ID

dd199f4a-f148-40a4-a2ec-f0069cc799ec

Catalog state

Enabled

Read, update, and delete all active role assignments for your company's directory

Allows the app to read and manage the active role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes managing active directory role membership, and reading directory role templates, directory roles and active memberships.

Permission ID

8c026be3-8e26-4774-9372-8d5d6f21daff

Catalog state

Enabled

Delete all active role assignments of your company's directory

Delete all active privileged role-based access control (RBAC) assignments of your company's directory, without a signed-in user.

Permission ID

d3495511-98b7-4df3-b317-4e35c19f6129

Catalog state

Enabled