Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 259/260 feeds/APIs · 416/439 docs · checked 23:48 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Graph permissions

Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.

Public permission catalog

1132 matching definitions
SecurityActions.ReadWrite.AllApplicationAdmin consent

Read and update your organization's security actions

Allows the app to read or update security actions, without a signed-in user.

Permission ID
f2bf083f-0179-402a-bedb-b2784de8a49b
Catalog state
Enabled
Microsoft permission reference
SecurityActions.ReadWrite.AllDelegatedAdmin consent

Read and update your organization's security actions

Allows the app to read or update security actions, on behalf of the signed-in user.

Permission ID
dc38509c-b87d-4da0-bd92-6bec988bac4a
Catalog state
Enabled
Microsoft permission reference
SecurityAlert.Read.AllApplicationAdmin consent

Read all security alerts

Allows the app to read all security alerts, without a signed-in user.

Permission ID
472e4a4d-bb4a-4026-98d1-0b0d74cb74a5
Catalog state
Enabled
Microsoft permission reference
SecurityAlert.Read.AllDelegatedAdmin consent

Read all security alerts

Allows the app to read all security alerts, on behalf of the signed-in user.

Permission ID
bc257fb8-46b4-4b15-8713-01e91bfbe4ea
Catalog state
Enabled
Microsoft permission reference
SecurityAlert.ReadWrite.AllApplicationAdmin consent

Read and write to all security alerts

Allows the app to read and write to all security alerts, without a signed-in user.

Permission ID
ed4fca05-be46-441f-9803-1873825f8fdb
Catalog state
Enabled
Microsoft permission reference
SecurityAlert.ReadWrite.AllDelegatedAdmin consent

Read and write to all security alerts

Allows the app to read and write to all security alerts, on behalf of the signed-in user.

Permission ID
471f2a7f-2a42-4d45-a2bf-594d0838070d
Catalog state
Enabled
Microsoft permission reference
SecurityAnalyzedMessage.Read.AllApplicationAdmin consent

Read security defender analyzed message data of an organization

Allows the app to read security defender analyzed message data of an organization without a signed-in user.

Permission ID
b48f7ac2-044d-4281-b02f-75db744d6f5f
Catalog state
Enabled
Microsoft permission reference
SecurityAnalyzedMessage.Read.AllDelegatedAdmin consent

Read metadata and detection details for emails in your organization

Read email metadata and security detection details on behalf of the signed in user.

Permission ID
53e6783e-b127-4a35-ab3a-6a52d80a9077
Catalog state
Enabled
Microsoft permission reference
SecurityAnalyzedMessage.ReadWrite.AllApplicationAdmin consent

Read, create, and update all security defender analyzed message data of an organization

Allows the app to read, create, and update security defender analyzed message data of an organization without a signed-in user.

Permission ID
04c55753-2244-4c25-87fc-704ab82a4f69
Catalog state
Enabled
Microsoft permission reference
SecurityAnalyzedMessage.ReadWrite.AllDelegatedAdmin consent

Read metadata, detection details, and execute remediation actions on emails in your organization

Read email metadata, security detection details, and execute remediation actions like deleting an email, on behalf of the signed in user.

Permission ID
48eb8c83-6e58-46e7-a6d3-8805822f5940
Catalog state
Enabled
Microsoft permission reference
SecurityEvents.Read.AllApplicationAdmin consent

Read your organization's security events

Allows the app to read your organization's security events without a signed-in user.

Permission ID
bf394140-e372-4bf9-a898-299cfc7564e5
Catalog state
Enabled
Microsoft permission reference
SecurityEvents.Read.AllDelegatedAdmin consent

Read your organization's security events

Allows the app to read your organization's security events on behalf of the signed-in user.

Permission ID
64733abd-851e-478a-bffb-e47a14b18235
Catalog state
Enabled
Microsoft permission reference
SecurityEvents.ReadWrite.AllApplicationAdmin consent

Read and update your organization's security events

Allows the app to read your organization's security events without a signed-in user. Also allows the app to update editable properties in security events.

Permission ID
d903a879-88e0-4c09-b0c9-82f6a1333f84
Catalog state
Enabled
Microsoft permission reference
SecurityEvents.ReadWrite.AllDelegatedAdmin consent

Read and update your organization's security events

Allows the app to read your organization's security events on behalf of the signed-in user. Also allows the app to update editable properties in security events on behalf of the signed-in user.

Permission ID
6aedf524-7e1c-45a7-bd76-ded8cab8d0fc
Catalog state
Enabled
Microsoft permission reference
SecurityIdentitiesHealth.Read.AllApplicationAdmin consent

Read all identity security health issues

Allows the app to read all the identity security health issues without a signed-in user.

Permission ID
f8dcd971-5d83-4e1e-aa95-ef44611ad351
Catalog state
Enabled
Microsoft permission reference
SecurityIdentitiesHealth.Read.AllDelegatedAdmin consent

Read identity security health issues

Allows the app to read all the identity security health issues of signed user

Permission ID
a0d0da43-a6df-4416-b63d-99c79991aae8
Catalog state
Enabled
Microsoft permission reference
SecurityIdentitiesHealth.ReadWrite.AllApplicationAdmin consent

Read and write all identity security health issues

Allows the app to read and write identity security health issues without a signed-in user.

Permission ID
ab03ddd5-7ae4-4f2e-8af8-86654f7e0a27
Catalog state
Enabled
Microsoft permission reference
SecurityIdentitiesHealth.ReadWrite.AllDelegatedAdmin consent

Read and write identity security health issues

Allows the app to read and write identity security health issues on behalf of the signed-in user.

Permission ID
53e51eec-2d9b-4990-97f3-c9aa5d5652c3
Catalog state
Enabled
Microsoft permission reference
SecurityIdentitiesSensors.Read.AllApplicationAdmin consent

Read all identity security sensors

Allows the app to read all the identity security sensors without a signed-in user.

Permission ID
5f0ffea2-f474-4cf2-9834-61cda2bcea5c
Catalog state
Enabled
Microsoft permission reference
SecurityIdentitiesSensors.Read.AllDelegatedAdmin consent

Read identity security sensors

Allows the app to read all the identity security sensors of signed user

Permission ID
2c221239-7c5c-4b30-9355-d84663bfcd96
Catalog state
Enabled
Microsoft permission reference
SecurityIdentitiesSensors.ReadWrite.AllApplicationAdmin consent

Read and write all identity security sensors

Allows the app to read and write identity security sensors without a signed-in user.

Permission ID
d4dcee6d-0774-412a-b06c-aeabbd99e816
Catalog state
Enabled
Microsoft permission reference
SecurityIdentitiesSensors.ReadWrite.AllDelegatedAdmin consent

Read and write identity security sensors

Allows the app to read and write identity security sensors on behalf of the signed-in user.

Permission ID
087c3ad9-c2ca-4b82-9885-d5e25ce9e183
Catalog state
Enabled
Microsoft permission reference
SecurityIdentitiesUserActions.Read.AllApplicationAdmin consent

Read all identity security available user actions

Allows the app to read all the identity security available user actions without a signed-in user.

Permission ID
3e5d0bee-973f-4736-a123-4e1ab146f3a8
Catalog state
Enabled
Microsoft permission reference
SecurityIdentitiesUserActions.Read.AllDelegatedAdmin consent

Read identity security available user actions

Allows the app to read all the identity security available user actions of signed user

Permission ID
c7d0a939-da1c-4aca-80fa-d0a6cd924801
Catalog state
Enabled
Microsoft permission reference
SecurityIdentitiesUserActions.ReadWrite.AllApplicationAdmin consent

Read and perform all identity security available user actions

Allows the app to read and write identity security available user actions without a signed-in user.

Permission ID
b4146a3a-dd4f-4af4-8d91-7cc0eef3d041
Catalog state
Enabled
Microsoft permission reference

Source: Microsoft Graph public permission definitions.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 21 Oct 23:48 UTC · 259 of 260 readable · 257 fully read · documentation 416/439 current