Microsoft Graph permissions
Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.
Public permission catalog
1132 matching definitionsRoleManagementAlert.Read.DirectoryApplicationAdmin consent
Read all alert data for your company's directory
Allows the app to read all role-based access control (RBAC) alerts for your company's directory, without a signed-in user. This includes reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.
- Permission ID
- ef31918f-2d50-4755-8943-b8638c0a077e
- Catalog state
- Enabled
RoleManagementAlert.Read.DirectoryDelegatedAdmin consent
Read all alert data for your company's directory
Allows the app to read the role-based access control (RBAC) alerts for your company's directory, on behalf of the signed-in user. This includes reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.
- Permission ID
- cce71173-f76d-446e-97ff-efb2d82e11b1
- Catalog state
- Enabled
RoleManagementAlert.ReadWrite.DirectoryApplicationAdmin consent
Read all alert data, configure alerts, and take actions on all alerts for your company's directory
Allows the app to read and manage all role-based access control (RBAC) alerts for your company's directory, without a signed-in user. This includes managing alert settings, initiating alert scans, dimissing alerts, remediating alert incidents, and reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.
- Permission ID
- 11059518-d6a6-4851-98ed-509268489c4a
- Catalog state
- Enabled
RoleManagementAlert.ReadWrite.DirectoryDelegatedAdmin consent
Read all alert data, configure alerts, and take actions on all alerts for your company's directory
Allows the app to read and manage the role-based access control (RBAC) alerts for your company's directory, on behalf of the signed-in user. This includes managing alert settings, initiating alert scans, dimissing alerts, remediating alert incidents, and reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert.
- Permission ID
- 435644c6-a5b1-40bf-8f52-fe8e5b53e19c
- Catalog state
- Enabled
RoleManagementPolicy.Read.AzureADGroupApplicationAdmin consent
No display name in the catalog
Microsoft supplies no description in this catalog.
- Permission ID
- 69e67828-780e-47fd-b28c-7b27d14864e6
- Catalog state
- Enabled
RoleManagementPolicy.Read.AzureADGroupDelegatedAdmin consent
Read all policies in PIM for Groups
Allows the app to read policies in Privileged Identity Management for Groups, on behalf of the signed-in user.
- Permission ID
- 7e26fdff-9cb1-4e56-bede-211fe0e420e8
- Catalog state
- Enabled
RoleManagementPolicy.Read.DirectoryApplicationAdmin consent
No display name in the catalog
Microsoft supplies no description in this catalog.
- Permission ID
- fdc4c997-9942-4479-bfcb-75a36d1138df
- Catalog state
- Enabled
RoleManagementPolicy.Read.DirectoryDelegatedAdmin consent
Read all policies for privileged role assignments of your company's directory
Allows the app to read policies for privileged role-based access control (RBAC) assignments of your company's directory, on behalf of the signed-in user.
- Permission ID
- 3de2cdbe-0ff5-47d5-bdee-7f45b4749ead
- Catalog state
- Enabled
RoleManagementPolicy.ReadWrite.AzureADGroupApplicationAdmin consent
No display name in the catalog
Microsoft supplies no description in this catalog.
- Permission ID
- b38dcc4d-a239-4ed6-aa84-6c65b284f97c
- Catalog state
- Enabled
RoleManagementPolicy.ReadWrite.AzureADGroupDelegatedAdmin consent
Read, update, and delete all policies in PIM for Groups
Allows the app to read, update, and delete policies in Privileged Identity Management for Groups, on behalf of the signed-in user.
- Permission ID
- 0da165c7-3f15-4236-b733-c0b0f6abe41d
- Catalog state
- Enabled
RoleManagementPolicy.ReadWrite.DirectoryApplicationAdmin consent
No display name in the catalog
Microsoft supplies no description in this catalog.
- Permission ID
- 31e08e0a-d3f7-4ca2-ac39-7343fb83e8ad
- Catalog state
- Enabled
RoleManagementPolicy.ReadWrite.DirectoryDelegatedAdmin consent
Read, update, and delete all policies for privileged role assignments of your company's directory
Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, on behalf of the signed-in user.
- Permission ID
- 1ff1be21-34eb-448c-9ac9-ce1f506b2a68
- Catalog state
- Enabled
Schedule-WorkingTime.ReadWrite.AllApplicationAdmin consent
Trigger all working time policies
Allows the app to trigger the working time policies without a signed-in user.
- Permission ID
- 0b21c159-dbf4-4dbb-a6f6-490e412c716e
- Catalog state
- Enabled
Schedule.Read.AllApplicationAdmin consent
Read all schedule items
Allows the app to read all schedules, schedule groups, shifts and associated entities in the Teams or Shifts application without a signed-in user.
- Permission ID
- 7b2ebf90-d836-437f-b90d-7b62722c4456
- Catalog state
- Enabled
Schedule.Read.AllDelegatedAdmin consent
Read user schedule items
Allows the app to read schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on behalf of the signed-in user.
- Permission ID
- fccf6dd8-5706-49fa-811f-69e2e1b585d0
- Catalog state
- Enabled
Schedule.ReadWrite.AllApplicationAdmin consent
Read and write all schedule items
Allows the app to manage all schedules, schedule groups, shifts and associated entities in the Teams or Shifts application without a signed-in user.
- Permission ID
- b7760610-0545-4e8a-9ec3-cce9e63db01c
- Catalog state
- Enabled
Schedule.ReadWrite.AllDelegatedAdmin consent
Read and write user schedule items
Allows the app to manage schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on behalf of the signed-in user.
- Permission ID
- 63f27281-c9d9-4f29-94dd-6942f7f1feb0
- Catalog state
- Enabled
SchedulePermissions.ReadWrite.AllApplicationAdmin consent
Read/Write schedule permissions for a role
Allows the app to read/write schedule permissions for a specific role in Shifts application without a signed-in user.
- Permission ID
- 7239b71d-b402-4150-b13d-78ecfe8df441
- Catalog state
- Enabled
SchedulePermissions.ReadWrite.AllDelegatedAdmin consent
Read/Write schedule permissions for a role
Allows the app to read/write schedule permissions for a specific role in Shifts application on behalf of the signed-in user.
- Permission ID
- 07919803-6073-4cd8-bc55-28077db0ee10
- Catalog state
- Enabled
SearchConfiguration.Read.AllApplicationAdmin consent
Read your organization's search configuration
Allows the app to read search configurations, without a signed-in user.
- Permission ID
- ada977a5-b8b1-493b-9a91-66c206d76ecf
- Catalog state
- Enabled
SearchConfiguration.Read.AllDelegatedAdmin consent
Read your organization's search configuration
Allows the app to read search configuration, on behalf of the signed-in user.
- Permission ID
- 7d307522-aa38-4cd0-bd60-90c6f0ac50bd
- Catalog state
- Enabled
SearchConfiguration.ReadWrite.AllApplicationAdmin consent
Read and write your organization's search configuration
Allows the app to read and write search configurations, without a signed-in user.
- Permission ID
- 0e778b85-fefa-466d-9eec-750569d92122
- Catalog state
- Enabled
SearchConfiguration.ReadWrite.AllDelegatedAdmin consent
Read and write your organization's search configuration
Allows the app to read and write search configuration, on behalf of the signed-in user.
- Permission ID
- b1a7d408-cab0-47d2-a2a5-a74a3733600d
- Catalog state
- Enabled
SecurityActions.Read.AllApplicationAdmin consent
Read your organization's security actions
Allows the app to read security actions, without a signed-in user.
- Permission ID
- 5e0edab9-c148-49d0-b423-ac253e121825
- Catalog state
- Enabled
SecurityActions.Read.AllDelegatedAdmin consent
Read your organization's security actions
Allows the app to read security actions, on behalf of the signed-in user.
- Permission ID
- 1638cddf-07a4-4de2-8645-69c96cacad73
- Catalog state
- Enabled