Microsoft Graph permissions
Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.
Public permission catalog
1132 matching definitionsSecurityIdentitiesUserActions.ReadWrite.AllDelegatedAdmin consent
Read and perform identity security available user actions
Allows the app to read and write identity security available user actions on behalf of the signed-in user.
- Permission ID
- bf230e97-1957-4df6-b3f6-57f9029eacdf
- Catalog state
- Enabled
SecurityIncident.Read.AllApplicationAdmin consent
Read all security incidents
Allows the app to read all security incidents, without a signed-in user.
- Permission ID
- 45cc0394-e837-488b-a098-1918f48d186c
- Catalog state
- Enabled
SecurityIncident.Read.AllDelegatedAdmin consent
Read incidents
Allows the app to read security incidents, on behalf of the signed-in user.
- Permission ID
- b9abcc4f-94fc-4457-9141-d20ce80ec952
- Catalog state
- Enabled
SecurityIncident.ReadWrite.AllApplicationAdmin consent
Read and write to all security incidents
Allows the app to read and write to all security incidents, without a signed-in user.
- Permission ID
- 34bf0e97-1971-4929-b999-9e2442d941d7
- Catalog state
- Enabled
SecurityIncident.ReadWrite.AllDelegatedAdmin consent
Read and write to incidents
Allows the app to read and write security incidents, on behalf of the signed-in user.
- Permission ID
- 128ca929-1a19-45e6-a3b8-435ec44a36ba
- Catalog state
- Enabled
ServiceActivity-Exchange.Read.AllApplicationAdmin consent
Read all Exchange service activity
Allows the app to read all Exchange service activity, without a signed-in user.
- Permission ID
- 2b655018-450a-4845-81e7-d603b1ebffdb
- Catalog state
- Enabled
ServiceActivity-Exchange.Read.AllDelegatedAdmin consent
Read all Exchange service activity
Allows the app to read all Exchange service activity, on behalf of the signed-in user.
- Permission ID
- 1fe7aa48-9373-4a47-8df3-168335e0f4c9
- Catalog state
- Enabled
ServiceActivity-Microsoft365Web.Read.AllApplicationAdmin consent
Read all Microsoft 365 Web service activity
Allows the app to read all Microsoft 365 Web service activity, without a signed-in user.
- Permission ID
- c766cb16-acc4-4663-ba09-6eedef5876c5
- Catalog state
- Enabled
ServiceActivity-Microsoft365Web.Read.AllDelegatedAdmin consent
Read all Microsoft 365 Web service activity
Allows the app to read all Microsoft 365 Web service activity, on behalf of the signed-in user.
- Permission ID
- d74c75b1-d5a9-479d-902d-92f8f99182c1
- Catalog state
- Enabled
ServiceActivity-OneDrive.Read.AllApplicationAdmin consent
Read all One Drive service activity
Allows the app to read all One Drive service activity, without a signed-in user.
- Permission ID
- 57b4f899-b8c5-47c7-bdd3-c410c55602b7
- Catalog state
- Enabled
ServiceActivity-OneDrive.Read.AllDelegatedAdmin consent
Read all One Drive service activity
Allows the app to read all One Drive service activity, on behalf of the signed-in user.
- Permission ID
- 347e3c16-30f3-4ac7-9b52-fc3c053de9c9
- Catalog state
- Enabled
ServiceActivity-Teams.Read.AllApplicationAdmin consent
Read all Teams service activity
Allows the app to read all Teams service activity, without a signed-in user.
- Permission ID
- 4dfee10b-fa4a-41b5-b34d-ccf54cc0c394
- Catalog state
- Enabled
ServiceActivity-Teams.Read.AllDelegatedAdmin consent
Read all Teams service activity
Allows the app to read all Teams service activity, on behalf of the signed-in user.
- Permission ID
- 404d76f0-e10e-460a-92be-ef19600c54d1
- Catalog state
- Enabled
ServiceHealth.Read.AllApplicationAdmin consent
Read service health
Allows the app to read your tenant's service health information, without a signed-in user. Health information may include service issues or service health overviews.
- Permission ID
- 79c261e0-fe76-4144-aad5-bdc68fbe4037
- Catalog state
- Enabled
ServiceHealth.Read.AllDelegatedAdmin consent
Read service health
Allows the app to read your tenant's service health information on behalf of the signed-in admin user. Health information may include service issues or service health overviews.
- Permission ID
- 55896846-df78-47a7-aa94-8d3d4442ca7f
- Catalog state
- Enabled
ServiceMessage.Read.AllApplicationAdmin consent
Read service messages
Allows the app to read your tenant's service announcement messages, without a signed-in user. Messages may include information about new or changed features.
- Permission ID
- 1b620472-6534-4fe6-9df2-4680e8aa28ec
- Catalog state
- Enabled
ServiceMessage.Read.AllDelegatedAdmin consent
Read service announcement messages
Allows the app to read your tenant's service announcement messages on behalf of the signed-in admin user. Messages may include information about new or changed features.
- Permission ID
- eda39fa6-f8cf-4c3c-a909-432c683e4c9b
- Catalog state
- Enabled
ServiceMessageViewpoint.WriteDelegatedAdmin consent
Update user status on service announcement messages
Allows the app to update service announcement messages' admin user status on behalf of the signed-in admin user. The message status can be marked as read, archive, or favorite.
- Permission ID
- 636e1b0b-1cc2-4b1c-9aa9-4eeed9b9761b
- Catalog state
- Enabled
ServicePrincipalEndpoint.Read.AllApplicationAdmin consent
No display name in the catalog
Microsoft supplies no description in this catalog.
- Permission ID
- 5256681e-b7f6-40c0-8447-2d9db68797a0
- Catalog state
- Enabled
ServicePrincipalEndpoint.Read.AllDelegatedAdmin consent
Read service principal endpoints
Allows the app to read service principal endpoints
- Permission ID
- 9f9ce928-e038-4e3b-8faf-7b59049a8ddc
- Catalog state
- Enabled
ServicePrincipalEndpoint.ReadWrite.AllApplicationAdmin consent
No display name in the catalog
Microsoft supplies no description in this catalog.
- Permission ID
- 89c8469c-83ad-45f7-8ff2-6e3d4285709e
- Catalog state
- Enabled
ServicePrincipalEndpoint.ReadWrite.AllDelegatedAdmin consent
Read and update service principal endpoints
Allows the app to update service principal endpoints
- Permission ID
- 7297d82c-9546-4aed-91df-3d4f0a9b3ff0
- Catalog state
- Enabled
SharePointTenantSettings.Read.AllApplicationAdmin consent
Read SharePoint and OneDrive tenant settings
Allows the application to read the tenant-level settings of SharePoint and OneDrive, without a signed-in user.
- Permission ID
- 83d4163d-a2d8-4d3b-9695-4ae3ca98f888
- Catalog state
- Enabled
SharePointTenantSettings.Read.AllDelegatedAdmin consent
Read SharePoint and OneDrive tenant settings
Allows the application to read the tenant-level settings in SharePoint and OneDrive on behalf of the signed-in user.
- Permission ID
- 2ef70e10-5bfd-4ede-a5f6-67720500b258
- Catalog state
- Enabled
SharePointTenantSettings.ReadWrite.AllApplicationAdmin consent
Read and change SharePoint and OneDrive tenant settings
Allows the application to read and change the tenant-level settings of SharePoint and OneDrive, without a signed-in user.
- Permission ID
- 19b94e34-907c-4f43-bde9-38b1909ed408
- Catalog state
- Enabled