Microsoft Graph permissions
Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.
Public permission catalog
1132 matching definitionsUser-PasswordProfile.ReadWrite.AllApplicationAdmin consent
Update password profile property and reset password for all users
Allows the app to update password profile property and reset password for all users, without a signed-in user.
- Permission ID
- cc117bb9-00cf-4eb8-b580-ea2a878fe8f7
- Catalog state
- Enabled
User-PasswordProfile.ReadWrite.AllDelegatedAdmin consent
Update password profile property and reset password for all users
Allows the app to update password profile property and reset password for all users for all users, on behalf of the signed-in user.
- Permission ID
- 56760768-b641-451f-8906-e1b8ab31bca7
- Catalog state
- Enabled
User-Phone.ReadWrite.AllApplicationAdmin consent
Update business phones and mobile phone properties for all users
Allows the app to update business phones and mobile phone properties for all users, without a signed-in user.
- Permission ID
- 86ceff06-c822-49ff-989a-d912845ffe69
- Catalog state
- Enabled
User-Phone.ReadWrite.AllDelegatedAdmin consent
Update business phones and mobile phone properties for all users
Allows the app to update business phones and mobile phone properties for all users, on behalf of the signed-in user.
- Permission ID
- e29d5979-5b06-4a7f-ae24-6a9348d2e1ff
- Catalog state
- Enabled
User.DeleteRestore.AllApplicationAdmin consent
Delete and restore user accounts
Allows the app to delete and restore users' accounts, without a signed-in user.
- Permission ID
- eccc023d-eccf-4e7b-9683-8813ab36cecc
- Catalog state
- Enabled
User.DeleteRestore.AllDelegatedAdmin consent
Delete and restore user accounts
Allows the app to delete and restore users' accounts, on behalf of the signed-in user.
- Permission ID
- 4bb440cd-2cf2-4f90-8004-aa2acd2537c5
- Catalog state
- Enabled
User.EnableDisableAccount.AllApplicationAdmin consent
Enable and disable user accounts
Allows the app to enable and disable users' accounts, without a signed-in user.
- Permission ID
- 3011c876-62b7-4ada-afa2-506cbbecc68c
- Catalog state
- Enabled
User.EnableDisableAccount.AllDelegatedAdmin consent
Enable and disable user accounts
Allows the app to enable and disable users' accounts, on behalf of the signed-in user.
- Permission ID
- f92e74e7-2563-467f-9dd0-902688cb5863
- Catalog state
- Enabled
User.Export.AllApplicationAdmin consent
Export user's data
Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).
- Permission ID
- 405a51b5-8d8d-430b-9842-8be4b0e9f324
- Catalog state
- Enabled
User.Export.AllDelegatedAdmin consent
Export user's data
Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).
- Permission ID
- 405a51b5-8d8d-430b-9842-8be4b0e9f324
- Catalog state
- Enabled
User.Invite.AllApplicationAdmin consent
Invite guest users to the organization
Allows the app to invite guest users to the organization, without a signed-in user.
- Permission ID
- 09850681-111b-4a89-9bed-3f2cae46d706
- Catalog state
- Enabled
User.Invite.AllDelegatedAdmin consent
Invite guest users to the organization
Allows the app to invite guest users to the organization, on behalf of the signed-in user.
- Permission ID
- 63dd7cd9-b489-4adf-a28c-ac38b9a0f962
- Catalog state
- Enabled
User.ManageIdentities.AllApplicationAdmin consent
Manage all users' identities
Allows the app to read, update and delete identities that are associated with a user's account, without a signed in user. This controls the identities users can sign-in with.
- Permission ID
- c529cfca-c91b-489c-af2b-d92990b66ce6
- Catalog state
- Enabled
User.ManageIdentities.AllDelegatedAdmin consent
Manage user identities
Allows the app to read, update and delete identities that are associated with a user's account that the signed-in user has access to. This controls the identities users can sign-in with.
- Permission ID
- 637d7bec-b31e-4deb-acc9-24275642a2c9
- Catalog state
- Enabled
User.ReadDelegatedDelegated consent
Sign in and read user profile
Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.
- Permission ID
- e1fe6dd8-ba31-4d61-89e7-88639da4683d
- Catalog state
- Enabled
User.Read.AllApplicationAdmin consent
Read all users' full profiles and company properties
Allows the app to read the full set of user properties of all users in the organization and read company properties without a signed in user.
- Permission ID
- df021288-bdef-4463-88db-98f22de89214
- Catalog state
- Enabled
User.Read.AllDelegatedAdmin consent
Read all users' full profiles and company properties
Allows the app to read the full set of user properties of all users in the organization and read company properties, on behalf of the signed-in user.
- Permission ID
- a154be20-db9c-4678-8ab7-66f6cc099a59
- Catalog state
- Enabled
User.ReadBasic.AllApplicationAdmin consent
Read all users' basic profiles
Allows the app to read a basic set of profile properties of users in your organization, without a signed-in user. This includes display name, first and last name, email address, photo, id and security identifier.
- Permission ID
- 97235f07-e226-4f63-ace3-39588e11d3a1
- Catalog state
- Enabled
User.ReadBasic.AllDelegatedDelegated consent
Read all users' basic profiles
Allows the app to read a basic set of profile properties of other users in your organization on behalf of the signed-in user. This includes display name, first and last name, email address, photo, id and security identifier. Also allows the app to read the full profile of the signed-in user.
- Permission ID
- b340eb25-3456-403f-be2f-af7a0d370277
- Catalog state
- Enabled
User.ReadWriteDelegatedDelegated consent
Read and write access to user profile
Allows the app to read your profile and basic company information. It also allows the app to update your profile information on your behalf.
- Permission ID
- b4e74841-8e56-480b-be8b-910348b18b4c
- Catalog state
- Enabled
User.ReadWrite.AllApplicationAdmin consent
Read and write all users' full profiles
Allows the app to read and update user profiles and read basic company properties without a signed in user.
- Permission ID
- 741f803b-c850-494e-b5df-cde7c675a1ca
- Catalog state
- Enabled
User.ReadWrite.AllDelegatedAdmin consent
Read and write all users' full profiles
Allows the app to read and write the full set of profile properties, reports, and managers of other users in your organization, and read basic company properties, on behalf of the signed-in user.
- Permission ID
- 204e0828-b5ca-4ad8-b9f3-f32a958e7cc4
- Catalog state
- Enabled
User.RevokeSessions.AllApplicationAdmin consent
Revoke all sign in sessions for a user
Allow the app to revoke all sign in sessions for a user, without a signed-in user.
- Permission ID
- 77f3a031-c388-4f99-b373-dc68676a979e
- Catalog state
- Enabled
User.RevokeSessions.AllDelegatedAdmin consent
Revoke all sign in sessions for a user
Allow the app to revoke all sign in sessions for a user, on behalf of a signed-in user.
- Permission ID
- fc30e98b-8810-4501-81f5-c20a3196387b
- Catalog state
- Enabled
UserActivity.ReadWrite.CreatedByAppDelegatedDelegated consent
Read and write app activity to users' activity feed
Allows the app to read and report the signed-in user's activity in the app.
- Permission ID
- 47607519-5fb1-47d9-99c7-da4b48f369b1
- Catalog state
- Enabled