Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 259/260 feeds/APIs · 416/439 docs · checked 23:48 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Graph permissions

Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.

Public permission catalog

1132 matching definitions
SharePointTenantSettings.ReadWrite.AllDelegatedAdmin consent

Read and change SharePoint and OneDrive tenant settings

Allows the application to read and change the tenant-level settings of SharePoint and OneDrive on behalf of the signed-in user.

Permission ID
aa07f155-3612-49b8-a147-6c590df35536
Catalog state
Enabled
Microsoft permission reference
ShortNotes.ReadDelegatedDelegated consent

Read short notes of the signed-in user

Allows the app to read all the short notes a sign-in user has access to.

Permission ID
50f66e47-eb56-45b7-aaa2-75057d9afe08
Catalog state
Enabled
Microsoft permission reference
ShortNotes.Read.AllApplicationAdmin consent

Read all users' short notes

Allows the app to read all the short notes without a signed-in user.

Permission ID
0c7d31ec-31ca-4f58-b6ec-9950b6b0de69
Catalog state
Enabled
Microsoft permission reference
ShortNotes.ReadWriteDelegatedDelegated consent

Read, create, edit, and delete short notes of the signed-in user

Allows the app to read, create, edit, and delete short notes of a signed-in user.

Permission ID
328438b7-4c01-4c07-a840-e625a749bb89
Catalog state
Enabled
Microsoft permission reference
ShortNotes.ReadWrite.AllApplicationAdmin consent

Read, create, edit, and delete all users' short notes

Allows the app to read, create, edit, and delete all the short notes without a signed-in user.

Permission ID
842c284c-763d-4a97-838d-79787d129bab
Catalog state
Enabled
Microsoft permission reference
Sites.FullControl.AllApplicationAdmin consent

Have full control of all site collections

Allows the app to have full control of all site collections without a signed in user.

Permission ID
a82116e5-55eb-4c41-a434-62fe8a61c773
Catalog state
Enabled
Microsoft permission reference
Sites.FullControl.AllDelegatedAdmin consent

Have full control of all site collections

Allows the application to have full control of all site collections on behalf of the signed-in user.

Permission ID
5a54b8b3-347c-476d-8f8e-42d5c7424d29
Catalog state
Enabled
Microsoft permission reference
Sites.Manage.AllApplicationAdmin consent

Create, edit, and delete items and lists in all site collections

Allows the app to create or delete document libraries and lists in all site collections without a signed in user.

Permission ID
0c0bf378-bf22-4481-8f81-9e89a9b4960a
Catalog state
Enabled
Microsoft permission reference
Sites.Manage.AllDelegatedDelegated consent

Create, edit, and delete items and lists in all site collections

Allows the application to create or delete document libraries and lists in all site collections on behalf of the signed-in user.

Permission ID
65e50fdc-43b7-4915-933e-e8138f11f40a
Catalog state
Enabled
Microsoft permission reference
Sites.Read.AllApplicationAdmin consent

Read items in all site collections

Allows the app to read documents and list items in all site collections without a signed in user.

Permission ID
332a536c-c7ef-4017-ab91-336970924f0d
Catalog state
Enabled
Microsoft permission reference
Sites.Read.AllDelegatedDelegated consent

Read items in all site collections

Allows the application to read documents and list items in all site collections on behalf of the signed-in user

Permission ID
205e70e5-aba6-4c52-a976-6d2d46c48043
Catalog state
Enabled
Microsoft permission reference
Sites.ReadWrite.AllApplicationAdmin consent

Read and write items in all site collections

Allows the app to create, read, update, and delete documents and list items in all site collections without a signed in user.

Permission ID
9492366f-7969-46a4-8d15-ed1a20078fff
Catalog state
Enabled
Microsoft permission reference
Sites.ReadWrite.AllDelegatedDelegated consent

Edit or delete items in all site collections

Allows the application to edit or delete documents and list items in all site collections on behalf of the signed-in user.

Permission ID
89fe6a52-be36-487e-b7d8-d061c450a026
Catalog state
Enabled
Microsoft permission reference
Sites.SelectedApplicationAdmin consent

Access selected site collections

Allow the application to access a subset of site collections without a signed in user. The specific site collections and the permissions granted will be configured in SharePoint Online.

Permission ID
883ea226-0bf2-4a8f-9f9d-92c9162a727d
Catalog state
Enabled
Microsoft permission reference
Sites.SelectedDelegatedDelegated consent

Access selected Sites, on behalf of the signed-in user

Allow the application to access a subset of site collections on behalf of the signed-in user. The specific site collections and the permissions granted will be configured in SharePoint Online.

Permission ID
f89c84ef-20d0-4b54-87e9-02e856d66d53
Catalog state
Enabled
Microsoft permission reference
SMTP.SendDelegatedDelegated consent

Send emails from mailboxes using SMTP AUTH

Allows the app to be able to send emails from the user's mailbox using the SMTP AUTH client submission protocol.

Permission ID
258f6531-6087-4cc4-bb90-092c5fb3ed3f
Catalog state
Enabled
Microsoft permission reference
SpiffeTrustDomain.Read.AllApplicationAdmin consent

Read SPIFFE trust domains and child resources

Allows the app to read your organization's SPIFFE trust domains and child resources without a signed in user.

Permission ID
dcdfc277-41fd-4d68-ad0c-c3057235bd8e
Catalog state
Enabled
Microsoft permission reference
SpiffeTrustDomain.Read.AllDelegatedAdmin consent

Read SPIFFE trust domains and child resources

Allows the app to read your organization's SPIFFE trust domains and child resources on behalf of the user.

Permission ID
9b4aa4b1-aaf3-41b7-b743-698b27e77ff6
Catalog state
Enabled
Microsoft permission reference
SpiffeTrustDomain.ReadWrite.AllApplicationAdmin consent

Read and write SPIFFE trust domains and child resources

Allows the app to read and write your organization's SPIFFE trust domains and child resources without a signed in user.

Permission ID
17b78cfd-eeff-447d-8bab-2795af00055a
Catalog state
Enabled
Microsoft permission reference
SpiffeTrustDomain.ReadWrite.AllDelegatedAdmin consent

Read and write SPIFFE trust domains and child resources

Allows the app to read and write your organization's SPIFFE trust domains and child resources on behalf of the user.

Permission ID
8ba47079-8c47-4bfe-b2ce-13f28ef37247
Catalog state
Enabled
Microsoft permission reference
SubjectRightsRequest.Read.AllApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
ee1460f0-368b-4153-870a-4e1ca7e72c42
Catalog state
Enabled
Microsoft permission reference
SubjectRightsRequest.Read.AllDelegatedAdmin consent

Read subject rights requests

Allows the app to read subject rights requests on behalf of the signed-in user

Permission ID
9c3af74c-fd0f-4db4-b17a-71939e2a9d77
Catalog state
Enabled
Microsoft permission reference
SubjectRightsRequest.ReadWrite.AllApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
8387eaa4-1a3c-41f5-b261-f888138e6041
Catalog state
Enabled
Microsoft permission reference
SubjectRightsRequest.ReadWrite.AllDelegatedAdmin consent

Read and write subject rights requests

Allows the app to read and write subject rights requests on behalf of the signed-in user

Permission ID
2b8fcc74-bce1-4ae3-a0e8-60c53739299d
Catalog state
Enabled
Microsoft permission reference
Subscription.Read.AllDelegatedAdmin consent

Read all webhook subscriptions

Allows the app to read all webhook subscriptions on behalf of the signed-in user.

Permission ID
5f88184c-80bb-4d52-9ff2-757288b2e9b7
Catalog state
Enabled
Microsoft permission reference

Source: Microsoft Graph public permission definitions.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 21 Oct 23:48 UTC · 259 of 260 readable · 257 fully read · documentation 416/439 current