Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 259/260 feeds/APIs · 416/439 docs · checked 23:48 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Graph permissions

Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.

Public permission catalog

1132 matching definitions
SecurityIdentitiesUserActions.ReadWrite.AllDelegatedAdmin consent

Read and perform identity security available user actions

Allows the app to read and write identity security available user actions on behalf of the signed-in user.

Permission ID
bf230e97-1957-4df6-b3f6-57f9029eacdf
Catalog state
Enabled
Microsoft permission reference
SecurityIncident.Read.AllApplicationAdmin consent

Read all security incidents

Allows the app to read all security incidents, without a signed-in user.

Permission ID
45cc0394-e837-488b-a098-1918f48d186c
Catalog state
Enabled
Microsoft permission reference
SecurityIncident.Read.AllDelegatedAdmin consent

Read incidents

Allows the app to read security incidents, on behalf of the signed-in user.

Permission ID
b9abcc4f-94fc-4457-9141-d20ce80ec952
Catalog state
Enabled
Microsoft permission reference
SecurityIncident.ReadWrite.AllApplicationAdmin consent

Read and write to all security incidents

Allows the app to read and write to all security incidents, without a signed-in user.

Permission ID
34bf0e97-1971-4929-b999-9e2442d941d7
Catalog state
Enabled
Microsoft permission reference
SecurityIncident.ReadWrite.AllDelegatedAdmin consent

Read and write to incidents

Allows the app to read and write security incidents, on behalf of the signed-in user.

Permission ID
128ca929-1a19-45e6-a3b8-435ec44a36ba
Catalog state
Enabled
Microsoft permission reference
ServiceActivity-Exchange.Read.AllApplicationAdmin consent

Read all Exchange service activity

Allows the app to read all Exchange service activity, without a signed-in user.

Permission ID
2b655018-450a-4845-81e7-d603b1ebffdb
Catalog state
Enabled
Microsoft permission reference
ServiceActivity-Exchange.Read.AllDelegatedAdmin consent

Read all Exchange service activity

Allows the app to read all Exchange service activity, on behalf of the signed-in user.

Permission ID
1fe7aa48-9373-4a47-8df3-168335e0f4c9
Catalog state
Enabled
Microsoft permission reference
ServiceActivity-Microsoft365Web.Read.AllApplicationAdmin consent

Read all Microsoft 365 Web service activity

Allows the app to read all Microsoft 365 Web service activity, without a signed-in user.

Permission ID
c766cb16-acc4-4663-ba09-6eedef5876c5
Catalog state
Enabled
Microsoft permission reference
ServiceActivity-Microsoft365Web.Read.AllDelegatedAdmin consent

Read all Microsoft 365 Web service activity

Allows the app to read all Microsoft 365 Web service activity, on behalf of the signed-in user.

Permission ID
d74c75b1-d5a9-479d-902d-92f8f99182c1
Catalog state
Enabled
Microsoft permission reference
ServiceActivity-OneDrive.Read.AllApplicationAdmin consent

Read all One Drive service activity

Allows the app to read all One Drive service activity, without a signed-in user.

Permission ID
57b4f899-b8c5-47c7-bdd3-c410c55602b7
Catalog state
Enabled
Microsoft permission reference
ServiceActivity-OneDrive.Read.AllDelegatedAdmin consent

Read all One Drive service activity

Allows the app to read all One Drive service activity, on behalf of the signed-in user.

Permission ID
347e3c16-30f3-4ac7-9b52-fc3c053de9c9
Catalog state
Enabled
Microsoft permission reference
ServiceActivity-Teams.Read.AllApplicationAdmin consent

Read all Teams service activity

Allows the app to read all Teams service activity, without a signed-in user.

Permission ID
4dfee10b-fa4a-41b5-b34d-ccf54cc0c394
Catalog state
Enabled
Microsoft permission reference
ServiceActivity-Teams.Read.AllDelegatedAdmin consent

Read all Teams service activity

Allows the app to read all Teams service activity, on behalf of the signed-in user.

Permission ID
404d76f0-e10e-460a-92be-ef19600c54d1
Catalog state
Enabled
Microsoft permission reference
ServiceHealth.Read.AllApplicationAdmin consent

Read service health

Allows the app to read your tenant's service health information, without a signed-in user. Health information may include service issues or service health overviews.

Permission ID
79c261e0-fe76-4144-aad5-bdc68fbe4037
Catalog state
Enabled
Microsoft permission reference
ServiceHealth.Read.AllDelegatedAdmin consent

Read service health

Allows the app to read your tenant's service health information on behalf of the signed-in admin user. Health information may include service issues or service health overviews.

Permission ID
55896846-df78-47a7-aa94-8d3d4442ca7f
Catalog state
Enabled
Microsoft permission reference
ServiceMessage.Read.AllApplicationAdmin consent

Read service messages

Allows the app to read your tenant's service announcement messages, without a signed-in user. Messages may include information about new or changed features.

Permission ID
1b620472-6534-4fe6-9df2-4680e8aa28ec
Catalog state
Enabled
Microsoft permission reference
ServiceMessage.Read.AllDelegatedAdmin consent

Read service announcement messages

Allows the app to read your tenant's service announcement messages on behalf of the signed-in admin user. Messages may include information about new or changed features.

Permission ID
eda39fa6-f8cf-4c3c-a909-432c683e4c9b
Catalog state
Enabled
Microsoft permission reference
ServiceMessageViewpoint.WriteDelegatedAdmin consent

Update user status on service announcement messages

Allows the app to update service announcement messages' admin user status on behalf of the signed-in admin user. The message status can be marked as read, archive, or favorite.

Permission ID
636e1b0b-1cc2-4b1c-9aa9-4eeed9b9761b
Catalog state
Enabled
Microsoft permission reference
ServicePrincipalEndpoint.Read.AllApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
5256681e-b7f6-40c0-8447-2d9db68797a0
Catalog state
Enabled
Microsoft permission reference
ServicePrincipalEndpoint.Read.AllDelegatedAdmin consent

Read service principal endpoints

Allows the app to read service principal endpoints

Permission ID
9f9ce928-e038-4e3b-8faf-7b59049a8ddc
Catalog state
Enabled
Microsoft permission reference
ServicePrincipalEndpoint.ReadWrite.AllApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
89c8469c-83ad-45f7-8ff2-6e3d4285709e
Catalog state
Enabled
Microsoft permission reference
ServicePrincipalEndpoint.ReadWrite.AllDelegatedAdmin consent

Read and update service principal endpoints

Allows the app to update service principal endpoints

Permission ID
7297d82c-9546-4aed-91df-3d4f0a9b3ff0
Catalog state
Enabled
Microsoft permission reference
SharePointTenantSettings.Read.AllApplicationAdmin consent

Read SharePoint and OneDrive tenant settings

Allows the application to read the tenant-level settings of SharePoint and OneDrive, without a signed-in user.

Permission ID
83d4163d-a2d8-4d3b-9695-4ae3ca98f888
Catalog state
Enabled
Microsoft permission reference
SharePointTenantSettings.Read.AllDelegatedAdmin consent

Read SharePoint and OneDrive tenant settings

Allows the application to read the tenant-level settings in SharePoint and OneDrive on behalf of the signed-in user.

Permission ID
2ef70e10-5bfd-4ede-a5f6-67720500b258
Catalog state
Enabled
Microsoft permission reference
SharePointTenantSettings.ReadWrite.AllApplicationAdmin consent

Read and change SharePoint and OneDrive tenant settings

Allows the application to read and change the tenant-level settings of SharePoint and OneDrive, without a signed-in user.

Permission ID
19b94e34-907c-4f43-bde9-38b1909ed408
Catalog state
Enabled
Microsoft permission reference

Source: Microsoft Graph public permission definitions.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 21 Oct 23:48 UTC · 259 of 260 readable · 257 fully read · documentation 416/439 current