Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 259/260 feeds/APIs · 416/439 docs · checked 01:51 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Graph permissions

Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.

Public permission catalog

1132 matching definitions
ThreatIntelligence.Read.AllDelegatedAdmin consent

Read all threat intelligence information

Allows the app to read threat intelligence information, such as indicators, observations, and articles, on behalf of the signed-in user.

Permission ID
f266d9c0-ccb9-4fb8-a228-01ac0d8d6627
Catalog state
Enabled
Microsoft permission reference
ThreatSubmission.ReadDelegatedDelegated consent

Read threat submissions

Allows the app to read the threat submissions and threat submission policies owned by the signed-in user.

Permission ID
fd5353c6-26dd-449f-a565-c4e16b9fce78
Catalog state
Enabled
Microsoft permission reference
ThreatSubmission.Read.AllApplicationAdmin consent

Read all of the organization's threat submissions

Allows the app to read your organization's threat submissions and to view threat submission policies without a signed-in user.

Permission ID
86632667-cd15-4845-ad89-48a88e8412e1
Catalog state
Enabled
Microsoft permission reference
ThreatSubmission.Read.AllDelegatedAdmin consent

Read all threat submissions

Allows the app to read your organization's threat submissions and threat submission policies on behalf of the signed-in user.

Permission ID
7083913a-4966-44b6-9886-c5822a5fd910
Catalog state
Enabled
Microsoft permission reference
ThreatSubmission.ReadWriteDelegatedDelegated consent

Read and write threat submissions

Allows the app to read the threat submissions and threat submission policies owned by the signed-in user. Also allows the app to create new threat submissions on behalf of the signed-in user.

Permission ID
68a3156e-46c9-443c-b85c-921397f082b5
Catalog state
Enabled
Microsoft permission reference
ThreatSubmission.ReadWrite.AllApplicationAdmin consent

Read and write all of the organization's threat submissions

Allows the app to read your organization's threat submissions and threat submission policies without a signed-in user. Also allows the app to create new threat submissions without a signed-in user.

Permission ID
d72bdbf4-a59b-405c-8b04-5995895819ac
Catalog state
Enabled
Microsoft permission reference
ThreatSubmission.ReadWrite.AllDelegatedAdmin consent

Read and write all threat submissions

Allows the app to read your organization's threat submissions and threat submission policies on behalf of the signed-in user. Also allows the app to create new threat submissions on behalf of the signed-in user.

Permission ID
8458e264-4eb9-4922-abe9-768d58f13c7f
Catalog state
Enabled
Microsoft permission reference
ThreatSubmissionPolicy.ReadWrite.AllApplicationAdmin consent

Read and write all of the organization's threat submission policies

Allows the app to read your organization's threat submission policies without a signed-in user. Also allows the app to create new threat submission polices without a signed-in user.

Permission ID
926a6798-b100-4a20-a22f-a4918f13951d
Catalog state
Enabled
Microsoft permission reference
ThreatSubmissionPolicy.ReadWrite.AllDelegatedAdmin consent

Read and write all threat submission policies

Allows the app to read your organization's threat submission policies on behalf of the signed-in user. Also allows the app to create new threat submission policies on behalf of the signed-in user.

Permission ID
059e5840-5353-4c68-b1da-666a033fc5e8
Catalog state
Enabled
Microsoft permission reference
Topic.Read.AllDelegatedAdmin consent

Read topic items

Allows the app to read topics data on behalf of the signed-in user.

Permission ID
79c4c76f-409a-4f98-884d-e2c09291ec26
Catalog state
Enabled
Microsoft permission reference
TrustFrameworkKeySet.Read.AllApplicationAdmin consent

Read trust framework key sets

Allows the app to read trust framework key set properties without a signed-in user.

Permission ID
fff194f1-7dce-4428-8301-1badb5518201
Catalog state
Enabled
Microsoft permission reference
TrustFrameworkKeySet.Read.AllDelegatedAdmin consent

Read trust framework key sets

Allows the app to read trust framework key set properties on behalf of the signed-in user.

Permission ID
7ad34336-f5b1-44ce-8682-31d7dfcd9ab9
Catalog state
Enabled
Microsoft permission reference
TrustFrameworkKeySet.ReadWrite.AllApplicationAdmin consent

Read and write trust framework key sets

Allows the app to read and write trust framework key set properties without a signed-in user.

Permission ID
4a771c9a-1cf2-4609-b88e-3d3e02d539cd
Catalog state
Enabled
Microsoft permission reference
TrustFrameworkKeySet.ReadWrite.AllDelegatedAdmin consent

Read and write trust framework key sets

Allows the app to read and write trust framework key set properties on behalf of the signed-in user.

Permission ID
39244520-1e7d-4b4a-aee0-57c65826e427
Catalog state
Enabled
Microsoft permission reference
UnifiedGroupMember.Read.AsGuestDelegatedAdmin consent

Read unified group memberships as guest

Allows the app to read basic unified group properties, memberships and owners of the group the signed-in guest is a member of.

Permission ID
73e75199-7c3e-41bb-9357-167164dbb415
Catalog state
Enabled
Microsoft permission reference
User-ConvertToInternal.ReadWrite.AllApplicationAdmin consent

Convert an external user to internal member user

Allow the app to convert an external user to an internal member user, without a signed-in user.

Permission ID
9d952b72-f741-4b40-9185-8c53076c2339
Catalog state
Enabled
Microsoft permission reference
User-ConvertToInternal.ReadWrite.AllDelegatedAdmin consent

Convert an external user to internal memeber user

Allow the app to convert an external user to an internal member user, on behalf of signed-in user.

Permission ID
550e695c-7511-40f4-ac79-e8fb9c82552d
Catalog state
Enabled
Microsoft permission reference
User-LifeCycleInfo.Read.AllApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
8556a004-db57-4d7a-8b82-97a13428e96f
Catalog state
Enabled
Microsoft permission reference
User-LifeCycleInfo.Read.AllDelegatedAdmin consent

Read all users' lifecycle information

Allows the app to read the lifecycle information like employeeLeaveDateTime of users in your organization, on behalf of the signed-in user.

Permission ID
ed8d2a04-0374-41f1-aefe-da8ac87ccc87
Catalog state
Enabled
Microsoft permission reference
User-LifeCycleInfo.ReadWrite.AllApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
925f1248-0f97-47b9-8ec8-538c54e01325
Catalog state
Enabled
Microsoft permission reference
User-LifeCycleInfo.ReadWrite.AllDelegatedAdmin consent

Read and write all users' lifecycle information

Allows the app to read and write the lifecycle information like employeeLeaveDateTime of users in your organization, on behalf of the signed-in user.

Permission ID
7ee7473e-bd4b-4c9f-987c-bd58481f5fa2
Catalog state
Enabled
Microsoft permission reference
User-Mail.ReadWrite.AllApplicationAdmin consent

Update other mails property for all users

Allows the app to update other mails property for all users, without a signed-in user.

Permission ID
280d0935-0796-47d1-8d26-273470a3f17a
Catalog state
Enabled
Microsoft permission reference
User-Mail.ReadWrite.AllDelegatedAdmin consent

Update other mails property for all users

Allows the app to update other mails property for all users for all users, on behalf of the signed-in user.

Permission ID
6166886a-9576-433b-8544-658177bdef1d
Catalog state
Enabled
Microsoft permission reference
User-OnPremisesSyncBehavior.ReadWrite.AllApplicationAdmin consent

Read and update the on-premises sync behavior of users

Allows the app to read and update the on-premises sync behavior of all users without a signed-in user.

Permission ID
a94a502d-0281-4d15-8cd2-682ac9362c4c
Catalog state
Enabled
Microsoft permission reference
User-OnPremisesSyncBehavior.ReadWrite.AllDelegatedAdmin consent

Read and update the on-premises sync behavior of users

Allows the app to read and update the on-premises sync behavior of users on behalf of the signed-in user.

Permission ID
7ff9afdd-0cdb-439d-a61c-fea3e9339e89
Catalog state
Enabled
Microsoft permission reference

Source: Microsoft Graph public permission definitions.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 22 Oct 01:51 UTC · 259 of 260 readable · 257 fully read · documentation 416/439 current