Microsoft Graph permissions
Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.
Public permission catalog
1132 matching definitionsContacts-OnPremisesSyncBehavior.ReadWrite.AllApplicationAdmin consent
Read and update the on-premises sync behavior of contacts
Allows the app to update the on-premises sync behavior of all contacts in all mailboxes without a signed-in user.
- Permission ID
- 1a997f7e-17c6-44c3-adc4-996e0712c777
- Catalog state
- Enabled
Contacts-OnPremisesSyncBehavior.ReadWrite.AllDelegatedAdmin consent
Read and update the on-premises sync behavior of contacts
Allows the app to read and update the on-premises sync behavior of contacts a user has permissions to, including their own and shared contacts.
- Permission ID
- ae180d45-006f-488a-a18a-18b00852edc6
- Catalog state
- Enabled
Contacts.ReadApplicationAdmin consent
Read contacts in all mailboxes
Allows the app to read all contacts in all mailboxes without a signed-in user.
- Permission ID
- 089fe4d0-434a-44c5-8827-41ba8a0b17f5
- Catalog state
- Enabled
Contacts.ReadDelegatedDelegated consent
Read user contacts
Allows the app to read user contacts.
- Permission ID
- ff74d97f-43af-4b68-9f2a-b77ee6968c5d
- Catalog state
- Enabled
Contacts.Read.SharedDelegatedDelegated consent
Read user and shared contacts
Allows the app to read contacts a user has permissions to access, including their own and shared contacts.
- Permission ID
- 242b9d9e-ed24-4d09-9a52-f43769beb9d4
- Catalog state
- Enabled
Contacts.ReadWriteApplicationAdmin consent
Read and write contacts in all mailboxes
Allows the app to create, read, update, and delete all contacts in all mailboxes without a signed-in user.
- Permission ID
- 6918b873-d17a-4dc1-b314-35f528134491
- Catalog state
- Enabled
Contacts.ReadWriteDelegatedDelegated consent
Have full access to user contacts
Allows the app to create, read, update, and delete user contacts.
- Permission ID
- d56682ec-c09e-4743-aaf4-1a3aac4caa21
- Catalog state
- Enabled
Contacts.ReadWrite.SharedDelegatedDelegated consent
Read and write user and shared contacts
Allows the app to create, read, update, and delete contacts a user has permissions to, including their own and shared contacts.
- Permission ID
- afb6c84b-06be-49af-80bb-8f3f77004eab
- Catalog state
- Enabled
CopilotSettings-LimitedMode.ReadDelegatedAdmin consent
Read organization-wide copilot limited mode setting
Allows the app to read organization-wide copilot limited mode setting on behalf of the signed-in user.
- Permission ID
- aeb2982d-632d-4155-b533-18756ab6fdd8
- Catalog state
- Enabled
CopilotSettings-LimitedMode.ReadWriteDelegatedAdmin consent
Read and write organization-wide copilot limited mode setting
Allows the app to read and write organization-wide copilot limited mode setting on behalf of the signed-in user.
- Permission ID
- 4704e5b2-0ada-4aa0-b18c-00ad7525bc06
- Catalog state
- Enabled
CrossTenantInformation.ReadBasic.AllApplicationAdmin consent
Read cross-tenant basic information
Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem without a signed-in user.
- Permission ID
- cac88765-0581-4025-9725-5ebc13f729ee
- Catalog state
- Enabled
CrossTenantInformation.ReadBasic.AllDelegatedAdmin consent
Read cross-tenant basic information
Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem on behalf of the signed-in user.
- Permission ID
- 81594d25-e88e-49cf-ac8c-fecbff49f994
- Catalog state
- Enabled
CrossTenantUserProfileSharing.ReadDelegatedAdmin consent
Read shared cross-tenant user profile and export data
Allows the application to list and query user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export external user data (e.g. customer content or system-generated logs), associated with the current tenant on behalf of the signed-in user.
- Permission ID
- cb1ba48f-d22b-4325-a07f-74135a62ee41
- Catalog state
- Enabled
CrossTenantUserProfileSharing.Read.AllApplicationAdmin consent
Read all shared cross-tenant user profiles and export their data
Allows the application to list and query any shared user profile information associated with the current tenant without a signed-in user. It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant without a signed-in user.
- Permission ID
- 8b919d44-6192-4f3d-8a3b-f86f8069ae3c
- Catalog state
- Enabled
CrossTenantUserProfileSharing.Read.AllDelegatedAdmin consent
Read all shared cross-tenant user profiles and export their data
Allows the application to list and query any shared user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on behalf of the signed-in user.
- Permission ID
- 759dcd16-3c90-463c-937e-abf89f991c18
- Catalog state
- Enabled
CrossTenantUserProfileSharing.ReadWriteDelegatedAdmin consent
Read shared cross-tenant user profile and export or delete data
Allows the application to list and query user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), associated with the current tenant on behalf of the signed-in user.
- Permission ID
- eed0129d-dc60-4f30-8641-daf337a39ffd
- Catalog state
- Enabled
CrossTenantUserProfileSharing.ReadWrite.AllApplicationAdmin consent
Read all shared cross-tenant user profiles and export or delete their data
Allows the application to list and query any shared user profile information associated with the current tenant without a signed-in user. It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant without a signed-in user.
- Permission ID
- 306785c5-c09b-4ba0-a4ee-023f3da165cb
- Catalog state
- Enabled
CrossTenantUserProfileSharing.ReadWrite.AllDelegatedAdmin consent
Read all shared cross-tenant user profiles and export or delete their data
Allows the application to list and query any shared user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on behalf of the signed-in user.
- Permission ID
- 64dfa325-cbf8-48e3-938d-51224a0cac01
- Catalog state
- Enabled
CustomAuthenticationExtension.Read.AllApplicationAdmin consent
Read all identity custom authentication extensions
Allows the app to read your organization's custom authentication extnesions, without a signed-in user.
- Permission ID
- 88bb2658-5d9e-454f-aacd-a3933e079526
- Catalog state
- Enabled
CustomAuthenticationExtension.Read.AllDelegatedAdmin consent
Read all identity custom authentication extensions
Allows the app to read your organization's custom authentication extensions, on behalf of the signed-in user.
- Permission ID
- b2052569-c98c-4f36-a5fb-43e5c111e6d0
- Catalog state
- Enabled
CustomAuthenticationExtension.ReadWrite.AllApplicationAdmin consent
Read and write all identity custom authentication extensions
Allows the app to read and write your organization's custom authentication extnesions, without a signed-in user.
- Permission ID
- c2667967-7050-4e7e-b059-4cbbb3811d03
- Catalog state
- Enabled
CustomAuthenticationExtension.ReadWrite.AllDelegatedAdmin consent
Read and write all identity custom authentication extensions
Allows the app to read and write your organization's custom authentication extnesions, on behalf of the signed-in user.
- Permission ID
- 8dfcf82f-15d0-43b3-bc78-a958a13a5792
- Catalog state
- Enabled
CustomAuthenticationExtension.Receive.PayloadApplicationAdmin consent
No display name in the catalog
Microsoft supplies no description in this catalog.
- Permission ID
- 214e810f-fda8-4fd7-a475-29461495eb00
- Catalog state
- Enabled
CustomDetection.Read.AllApplicationAdmin consent
Read all custom detection rules
Allows the app to read custom detection rules without a signed-in user.
- Permission ID
- 673a007a-9e0f-4c97-b066-3c0164486909
- Catalog state
- Enabled
CustomDetection.Read.AllDelegatedAdmin consent
Read custom detection rules
Allows the app to read custom detection rules on behalf of the signed-in user.
- Permission ID
- b13ff42e-f321-4d7d-a462-141c46a1b832
- Catalog state
- Enabled