Microsoft Graph permissions
Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.
Public permission catalog
1132 matching definitionsRoleAssignmentSchedule.Remove.DirectoryDelegatedAdmin consent
Delete all active role assignments for your company's directory
Allows the app to delete the active role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user.
- Permission ID
- f71cd05c-3fdb-4568-aef2-e1cf62ee20d4
- Catalog state
- Enabled
RoleEligibilitySchedule.Read.DirectoryApplicationAdmin consent
Read all eligible role assignments and role schedules for your company's directory
Allows the app to read the eligible role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes reading directory role templates, and directory roles.
- Permission ID
- ff278e11-4a33-4d0c-83d2-d01dc58929a5
- Catalog state
- Enabled
RoleEligibilitySchedule.Read.DirectoryDelegatedAdmin consent
Read all eligible role assignments for your company's directory
Allows the app to read the eligible role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, and directory roles.
- Permission ID
- eb0788c2-6d4e-4658-8c9e-c0fb8053f03d
- Catalog state
- Enabled
RoleEligibilitySchedule.ReadWrite.DirectoryApplicationAdmin consent
Read, update, and delete all eligible role assignments and schedules for your company's directory
Allows the app to read and manage the eligible role-based access control (RBAC) assignments and schedules for your company's directory, without a signed-in user. This includes managing eligible directory role membership, and reading directory role templates, directory roles and eligible memberships.
- Permission ID
- fee28b28-e1f3-4841-818e-2704dc62245f
- Catalog state
- Enabled
RoleEligibilitySchedule.ReadWrite.DirectoryDelegatedAdmin consent
Read, update, and delete all eligible role assignments for your company's directory
Allows the app to read and manage the eligible role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes managing eligible directory role membership, and reading directory role templates, directory roles and eligible memberships.
- Permission ID
- 62ade113-f8e0-4bf9-a6ba-5acb31db32fd
- Catalog state
- Enabled
RoleEligibilitySchedule.Remove.DirectoryApplicationAdmin consent
Delete all eligible role assignments of your company's directory
Delete all eligible privileged role-based access control (RBAC) assignments of your company's directory, without a signed-in user.
- Permission ID
- 79c7e69c-0d9f-4eff-97a8-49170a5a08ba
- Catalog state
- Enabled
RoleEligibilitySchedule.Remove.DirectoryDelegatedAdmin consent
Delete all eligible role assignments for your company's directory
Allows the app to delete the eligible role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user.
- Permission ID
- 58ac4fa2-b484-4d6e-ba97-beee2a574220
- Catalog state
- Enabled
RoleManagement.Read.AllApplicationAdmin consent
Read role management data for all RBAC providers
Allows the app to read role-based access control (RBAC) settings for all RBAC providers without a signed-in user. This includes reading role definitions and role assignments.
- Permission ID
- c7fbd983-d9aa-4fa7-84b8-17382c103bc4
- Catalog state
- Enabled
RoleManagement.Read.AllDelegatedAdmin consent
Read role management data for all RBAC providers
Allows the app to read the role-based access control (RBAC) settings for all RBAC providers, on behalf of the signed-in user. This includes reading role definitions and role assignments.
- Permission ID
- 48fec646-b2ba-4019-8681-8eb31435aded
- Catalog state
- Enabled
RoleManagement.Read.CloudPCApplicationAdmin consent
Read Cloud PC RBAC settings
Allows the app to read the Cloud PC role-based access control (RBAC) settings, without a signed-in user.
- Permission ID
- 031a549a-bb80-49b6-8032-2068448c6a3c
- Catalog state
- Enabled
RoleManagement.Read.CloudPCDelegatedAdmin consent
Read Cloud PC RBAC settings
Allows the app to read the Cloud PC role-based access control (RBAC) settings, on behalf of the signed-in user. This includes reading Cloud PC role definitions and role assignments.
- Permission ID
- 9619b88a-8a25-48a7-9571-d23be0337a79
- Catalog state
- Enabled
RoleManagement.Read.DefenderApplicationAdmin consent
Read M365 Defender RBAC configuration
Allows the app to read the role-based access control (RBAC) settings for your company's directory, without a signed-in user.
- Permission ID
- 4d6e30d1-e64e-4ae7-bf9d-c706cc928cef
- Catalog state
- Enabled
RoleManagement.Read.DefenderDelegatedAdmin consent
Read M365 Defender RBAC configuration
Allows the app to read the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes reading M365 Defender role definitions and role assignments.
- Permission ID
- dd689728-6eb8-4deb-bd38-2924a935f3de
- Catalog state
- Enabled
RoleManagement.Read.DirectoryApplicationAdmin consent
Read all directory RBAC settings
Allows the app to read the role-based access control (RBAC) settings for your company's directory, without a signed-in user. This includes reading directory role templates, directory roles and memberships.
- Permission ID
- 483bed4a-2ad3-4361-a73b-c83ccdbdc53c
- Catalog state
- Enabled
RoleManagement.Read.DirectoryDelegatedAdmin consent
Read directory RBAC settings
Allows the app to read the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, directory roles and memberships.
- Permission ID
- 741c54c3-0c1e-44a1-818b-3f97ab4e8c83
- Catalog state
- Enabled
RoleManagement.Read.ExchangeApplicationAdmin consent
Read Exchange Online RBAC configuration
Allows the app to read the role-based access control (RBAC) configuration for your organization's Exchange Online service, without a signed-in user. This includes reading Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.
- Permission ID
- c769435f-f061-4d0b-8ff1-3d39870e5f85
- Catalog state
- Enabled
RoleManagement.Read.ExchangeDelegatedAdmin consent
Read Exchange Online RBAC configuration
Allows the app to read the role-based access control (RBAC) settings for your organization's Exchange Online service, on behalf of the signed-in user. This includes reading Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.
- Permission ID
- 3bc15058-7858-4141-b24f-ae43b4e80b52
- Catalog state
- Enabled
RoleManagement.ReadWrite.CloudPCApplicationAdmin consent
Read and write all Cloud PC RBAC settings
Allows the app to read and manage the Cloud PC role-based access control (RBAC) settings, without a signed-in user. This includes reading and managing Cloud PC role definitions and memberships.
- Permission ID
- 274d0592-d1b6-44bd-af1d-26d259bcb43a
- Catalog state
- Enabled
RoleManagement.ReadWrite.CloudPCDelegatedAdmin consent
Read and write Cloud PC RBAC settings
Allows the app to read and manage the Cloud PC role-based access control (RBAC) settings, on behalf of the signed-in user. This includes reading and managing Cloud PC role definitions and role assignments.
- Permission ID
- 501d06f8-07b8-4f18-b5c6-c191a4af7a82
- Catalog state
- Enabled
RoleManagement.ReadWrite.DefenderApplicationAdmin consent
Read M365 Defender RBAC configuration
Allows the app to read the role-based access control (RBAC) settings for your company's directory, without a signed-in user.
- Permission ID
- 8b7e8c0a-7e9d-4049-97ec-04b5e1bcaf05
- Catalog state
- Enabled
RoleManagement.ReadWrite.DefenderDelegatedAdmin consent
Read M365 Defender RBAC configuration
Allows the app to read the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes reading M365 Defender role definitions and role assignments.
- Permission ID
- d8914f8f-9f64-4bd1-b4d3-f5a701ed8457
- Catalog state
- Enabled
RoleManagement.ReadWrite.DirectoryApplicationAdmin consent
Read and write all directory RBAC settings
Allows the app to read and manage the role-based access control (RBAC) settings for your company's directory, without a signed-in user. This includes instantiating directory roles and managing directory role membership, and reading directory role templates, directory roles and memberships.
- Permission ID
- 9e3f62cf-ca93-4989-b6ce-bf83c28f9fe8
- Catalog state
- Enabled
RoleManagement.ReadWrite.DirectoryDelegatedAdmin consent
Read and write directory RBAC settings
Allows the app to read and manage the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes instantiating directory roles and managing directory role membership, and reading directory role templates, directory roles and memberships.
- Permission ID
- d01b97e9-cbc0-49fe-810a-750afd5527a3
- Catalog state
- Enabled
RoleManagement.ReadWrite.ExchangeApplicationAdmin consent
Read and write Exchange Online RBAC configuration
Allows the app to read and manage the role-based access control (RBAC) settings for your organization's Exchange Online service, without a signed-in user. This includes reading, creating, updating, and deleting Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.
- Permission ID
- 025d3225-3f02-4882-b4c0-cd5b541a4e80
- Catalog state
- Enabled
RoleManagement.ReadWrite.ExchangeDelegatedAdmin consent
Read and write Exchange Online RBAC configuration
Allows the app to read and manage the role-based access control (RBAC) settings for your organization's Exchange Online service, on behalf of the signed-in user. This includes reading, creating, updating, and deleting Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies.
- Permission ID
- c1499fe0-52b1-4b22-bed2-7a244e0e879f
- Catalog state
- Enabled