Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 259/260 feeds/APIs · 416/439 docs · checked 00:50 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Graph permissions

Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.

Public permission catalog

1132 matching definitions
Synchronization.Read.AllApplicationAdmin consent

Read all Azure AD synchronization data.

Allows the application to read Azure AD synchronization information, without a signed-in user.

Permission ID
5ba43d2f-fa88-4db2-bd1c-a67c5f0fb1ce
Catalog state
Enabled
Microsoft permission reference
Synchronization.Read.AllDelegatedAdmin consent

Read all Azure AD synchronization data

Allows the app to read Azure AD synchronization information, on behalf of the signed-in user.

Permission ID
7aa02aeb-824f-4fbe-a3f7-611f751f5b55
Catalog state
Enabled
Microsoft permission reference
Synchronization.ReadWrite.AllApplicationAdmin consent

Read and write all Azure AD synchronization data.

Allows the application to configure the Azure AD synchronization service, without a signed-in user.

Permission ID
9b50c33d-700f-43b1-b2eb-87e89b703581
Catalog state
Enabled
Microsoft permission reference
Synchronization.ReadWrite.AllDelegatedAdmin consent

Read and write all Azure AD synchronization data

Allows the app to configure the Azure AD synchronization service, on behalf of the signed-in user.

Permission ID
7bb27fa3-ea8f-4d67-a916-87715b6188bd
Catalog state
Enabled
Microsoft permission reference
SynchronizationData-User.UploadApplicationAdmin consent

Upload user data to the identity synchronization service

Allows the application to upload bulk user data to the identity synchronization service, without a signed-in user.

Permission ID
db31e92a-b9ea-4d87-bf6a-75a37a9ca35a
Catalog state
Enabled
Microsoft permission reference
SynchronizationData-User.UploadDelegatedAdmin consent

Upload user data to the identity synchronization service

Allows the app to upload bulk user data to the identity synchronization service, on behalf of the signed-in user.

Permission ID
1a2e7420-4e92-4d2b-94cb-fb2952e9ddf7
Catalog state
Enabled
Microsoft permission reference
Tasks.ReadDelegatedDelegated consent

Read user's tasks and task lists

Allows the app to read the signed-in user's tasks and task lists, including any shared with the user. Doesn't include permission to create, delete, or update anything.

Permission ID
f45671fb-e0fe-4b4b-be20-3d3ce43f1bcb
Catalog state
Enabled
Microsoft permission reference
Tasks.Read.AllApplicationAdmin consent

Read all users' tasks and tasklist

Allows the app to read all users' tasks and task lists in your organization, without a signed-in user.

Permission ID
f10e1f91-74ed-437f-a6fd-d6ae88e26c1f
Catalog state
Enabled
Microsoft permission reference
Tasks.Read.SharedDelegatedDelegated consent

Read user and shared tasks

Allows the app to read tasks a user has permissions to access, including their own and shared tasks.

Permission ID
88d21fd4-8e5a-4c32-b5e2-4a1c95f34f72
Catalog state
Enabled
Microsoft permission reference
Tasks.ReadWriteDelegatedDelegated consent

Create, read, update, and delete user's tasks and task lists

Allows the app to create, read, update, and delete the signed-in user's tasks and task lists, including any shared with the user.

Permission ID
2219042f-cab5-40cc-b0d2-16b1540b4c5f
Catalog state
Enabled
Microsoft permission reference
Tasks.ReadWrite.AllApplicationAdmin consent

Read and write all users' tasks and tasklists

Allows the app to create, read, update and delete all users' tasks and task lists in your organization, without a signed-in user

Permission ID
44e666d1-d276-445b-a5fc-8815eeb81d55
Catalog state
Enabled
Microsoft permission reference
Tasks.ReadWrite.SharedDelegatedDelegated consent

Read and write user and shared tasks

Allows the app to create, read, update, and delete tasks a user has permissions to, including their own and shared tasks.

Permission ID
c5ddf11b-c114-4886-8558-8a4e557cd52b
Catalog state
Enabled
Microsoft permission reference
Team.CreateApplicationAdmin consent

Create teams

Allows the app to create teams without a signed-in user.

Permission ID
23fc2474-f741-46ce-8465-674744c5c361
Catalog state
Enabled
Microsoft permission reference
Team.CreateDelegatedDelegated consent

Create teams

Allows the app to create teams on behalf of the signed-in user.

Permission ID
7825d5d6-6049-4ce7-bdf6-3b8d53f4bcd0
Catalog state
Enabled
Microsoft permission reference
Team.ReadBasic.AllApplicationAdmin consent

Get a list of all teams

Get a list of all teams, without a signed-in user.

Permission ID
2280dda6-0bfd-44ee-a2f4-cb867cfc4c1e
Catalog state
Enabled
Microsoft permission reference
Team.ReadBasic.AllDelegatedDelegated consent

Read the names and descriptions of teams

Read the names and descriptions of teams, on behalf of the signed-in user.

Permission ID
485be79e-c497-4b35-9400-0e3fa7f2a5d4
Catalog state
Enabled
Microsoft permission reference
TeamMember.Read.AllApplicationAdmin consent

Read the members of all teams

Read the members of all teams, without a signed-in user.

Permission ID
660b7406-55f1-41ca-a0ed-0b035e182f3e
Catalog state
Enabled
Microsoft permission reference
TeamMember.Read.AllDelegatedAdmin consent

Read the members of teams

Read the members of teams, on behalf of the signed-in user.

Permission ID
2497278c-d82d-46a2-b1ce-39d4cdde5570
Catalog state
Enabled
Microsoft permission reference
TeamMember.ReadWrite.AllApplicationAdmin consent

Add and remove members from all teams

Add and remove members from all teams, without a signed-in user. Also allows changing a team member's role, for example from owner to non-owner.

Permission ID
0121dc95-1b9f-4aed-8bac-58c5ac466691
Catalog state
Enabled
Microsoft permission reference
TeamMember.ReadWrite.AllDelegatedAdmin consent

Add and remove members from teams

Add and remove members from teams, on behalf of the signed-in user. Also allows changing a member's role, for example from owner to non-owner.

Permission ID
4a06efd2-f825-4e34-813e-82a57b03d1ee
Catalog state
Enabled
Microsoft permission reference
TeamMember.ReadWriteNonOwnerRole.AllApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
4437522e-9a86-4a41-a7da-e380edd4a97d
Catalog state
Enabled
Microsoft permission reference
TeamMember.ReadWriteNonOwnerRole.AllDelegatedAdmin consent

Add and remove members with non-owner role for all teams

Add and remove members from all teams, on behalf of the signed-in user. Does not allow adding or removing a member with the owner role. Additionally, does not allow the app to elevate an existing member to the owner role.

Permission ID
2104a4db-3a2f-4ea0-9dba-143d457dc666
Catalog state
Enabled
Microsoft permission reference
TeamsActivity.ReadDelegatedDelegated consent

Read user's teamwork activity feed

Allows the app to read the signed-in user's teamwork activity feed.

Permission ID
0e755559-83fb-4b44-91d0-4cc721b9323e
Catalog state
Enabled
Microsoft permission reference
TeamsActivity.Read.AllApplicationAdmin consent

Read all users' teamwork activity feed

Allows the app to read all users' teamwork activity feed, without a signed-in user.

Permission ID
70dec828-f620-4914-aa83-a29117306807
Catalog state
Enabled
Microsoft permission reference
TeamsActivity.SendApplicationAdmin consent

Send a teamwork activity to any user

Allows the app to create new notifications in users' teamwork activity feeds without a signed in user. These notifications may not be discoverable or be held or governed by compliance policies.

Permission ID
a267235f-af13-44dc-8385-c1dc93023186
Catalog state
Enabled
Microsoft permission reference

Source: Microsoft Graph public permission definitions.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 22 Oct 00:50 UTC · 259 of 260 readable · 257 fully read · documentation 416/439 current