Microsoft Graph permissions
Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.
Public permission catalog
1132 matching definitionsSynchronization.Read.AllApplicationAdmin consent
Read all Azure AD synchronization data.
Allows the application to read Azure AD synchronization information, without a signed-in user.
- Permission ID
- 5ba43d2f-fa88-4db2-bd1c-a67c5f0fb1ce
- Catalog state
- Enabled
Synchronization.Read.AllDelegatedAdmin consent
Read all Azure AD synchronization data
Allows the app to read Azure AD synchronization information, on behalf of the signed-in user.
- Permission ID
- 7aa02aeb-824f-4fbe-a3f7-611f751f5b55
- Catalog state
- Enabled
Synchronization.ReadWrite.AllApplicationAdmin consent
Read and write all Azure AD synchronization data.
Allows the application to configure the Azure AD synchronization service, without a signed-in user.
- Permission ID
- 9b50c33d-700f-43b1-b2eb-87e89b703581
- Catalog state
- Enabled
Synchronization.ReadWrite.AllDelegatedAdmin consent
Read and write all Azure AD synchronization data
Allows the app to configure the Azure AD synchronization service, on behalf of the signed-in user.
- Permission ID
- 7bb27fa3-ea8f-4d67-a916-87715b6188bd
- Catalog state
- Enabled
SynchronizationData-User.UploadApplicationAdmin consent
Upload user data to the identity synchronization service
Allows the application to upload bulk user data to the identity synchronization service, without a signed-in user.
- Permission ID
- db31e92a-b9ea-4d87-bf6a-75a37a9ca35a
- Catalog state
- Enabled
SynchronizationData-User.UploadDelegatedAdmin consent
Upload user data to the identity synchronization service
Allows the app to upload bulk user data to the identity synchronization service, on behalf of the signed-in user.
- Permission ID
- 1a2e7420-4e92-4d2b-94cb-fb2952e9ddf7
- Catalog state
- Enabled
Tasks.ReadDelegatedDelegated consent
Read user's tasks and task lists
Allows the app to read the signed-in user's tasks and task lists, including any shared with the user. Doesn't include permission to create, delete, or update anything.
- Permission ID
- f45671fb-e0fe-4b4b-be20-3d3ce43f1bcb
- Catalog state
- Enabled
Tasks.Read.AllApplicationAdmin consent
Read all users' tasks and tasklist
Allows the app to read all users' tasks and task lists in your organization, without a signed-in user.
- Permission ID
- f10e1f91-74ed-437f-a6fd-d6ae88e26c1f
- Catalog state
- Enabled
Tasks.Read.SharedDelegatedDelegated consent
Read user and shared tasks
Allows the app to read tasks a user has permissions to access, including their own and shared tasks.
- Permission ID
- 88d21fd4-8e5a-4c32-b5e2-4a1c95f34f72
- Catalog state
- Enabled
Tasks.ReadWriteDelegatedDelegated consent
Create, read, update, and delete user's tasks and task lists
Allows the app to create, read, update, and delete the signed-in user's tasks and task lists, including any shared with the user.
- Permission ID
- 2219042f-cab5-40cc-b0d2-16b1540b4c5f
- Catalog state
- Enabled
Tasks.ReadWrite.AllApplicationAdmin consent
Read and write all users' tasks and tasklists
Allows the app to create, read, update and delete all users' tasks and task lists in your organization, without a signed-in user
- Permission ID
- 44e666d1-d276-445b-a5fc-8815eeb81d55
- Catalog state
- Enabled
Tasks.ReadWrite.SharedDelegatedDelegated consent
Read and write user and shared tasks
Allows the app to create, read, update, and delete tasks a user has permissions to, including their own and shared tasks.
- Permission ID
- c5ddf11b-c114-4886-8558-8a4e557cd52b
- Catalog state
- Enabled
Team.CreateApplicationAdmin consent
Create teams
Allows the app to create teams without a signed-in user.
- Permission ID
- 23fc2474-f741-46ce-8465-674744c5c361
- Catalog state
- Enabled
Team.CreateDelegatedDelegated consent
Create teams
Allows the app to create teams on behalf of the signed-in user.
- Permission ID
- 7825d5d6-6049-4ce7-bdf6-3b8d53f4bcd0
- Catalog state
- Enabled
Team.ReadBasic.AllApplicationAdmin consent
Get a list of all teams
Get a list of all teams, without a signed-in user.
- Permission ID
- 2280dda6-0bfd-44ee-a2f4-cb867cfc4c1e
- Catalog state
- Enabled
Team.ReadBasic.AllDelegatedDelegated consent
Read the names and descriptions of teams
Read the names and descriptions of teams, on behalf of the signed-in user.
- Permission ID
- 485be79e-c497-4b35-9400-0e3fa7f2a5d4
- Catalog state
- Enabled
TeamMember.Read.AllApplicationAdmin consent
Read the members of all teams
Read the members of all teams, without a signed-in user.
- Permission ID
- 660b7406-55f1-41ca-a0ed-0b035e182f3e
- Catalog state
- Enabled
TeamMember.Read.AllDelegatedAdmin consent
Read the members of teams
Read the members of teams, on behalf of the signed-in user.
- Permission ID
- 2497278c-d82d-46a2-b1ce-39d4cdde5570
- Catalog state
- Enabled
TeamMember.ReadWrite.AllApplicationAdmin consent
Add and remove members from all teams
Add and remove members from all teams, without a signed-in user. Also allows changing a team member's role, for example from owner to non-owner.
- Permission ID
- 0121dc95-1b9f-4aed-8bac-58c5ac466691
- Catalog state
- Enabled
TeamMember.ReadWrite.AllDelegatedAdmin consent
Add and remove members from teams
Add and remove members from teams, on behalf of the signed-in user. Also allows changing a member's role, for example from owner to non-owner.
- Permission ID
- 4a06efd2-f825-4e34-813e-82a57b03d1ee
- Catalog state
- Enabled
TeamMember.ReadWriteNonOwnerRole.AllApplicationAdmin consent
No display name in the catalog
Microsoft supplies no description in this catalog.
- Permission ID
- 4437522e-9a86-4a41-a7da-e380edd4a97d
- Catalog state
- Enabled
TeamMember.ReadWriteNonOwnerRole.AllDelegatedAdmin consent
Add and remove members with non-owner role for all teams
Add and remove members from all teams, on behalf of the signed-in user. Does not allow adding or removing a member with the owner role. Additionally, does not allow the app to elevate an existing member to the owner role.
- Permission ID
- 2104a4db-3a2f-4ea0-9dba-143d457dc666
- Catalog state
- Enabled
TeamsActivity.ReadDelegatedDelegated consent
Read user's teamwork activity feed
Allows the app to read the signed-in user's teamwork activity feed.
- Permission ID
- 0e755559-83fb-4b44-91d0-4cc721b9323e
- Catalog state
- Enabled
TeamsActivity.Read.AllApplicationAdmin consent
Read all users' teamwork activity feed
Allows the app to read all users' teamwork activity feed, without a signed-in user.
- Permission ID
- 70dec828-f620-4914-aa83-a29117306807
- Catalog state
- Enabled
TeamsActivity.SendApplicationAdmin consent
Send a teamwork activity to any user
Allows the app to create new notifications in users' teamwork activity feeds without a signed in user. These notifications may not be discoverable or be held or governed by compliance policies.
- Permission ID
- a267235f-af13-44dc-8385-c1dc93023186
- Catalog state
- Enabled