Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 258/260 feeds/APIs · 416/439 docs · checked 06:02 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Graph permissions

Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.

Public permission catalog

1132 matching definitions
Contacts-OnPremisesSyncBehavior.ReadWrite.AllApplicationAdmin consent

Read and update the on-premises sync behavior of contacts

Allows the app to update the on-premises sync behavior of all contacts in all mailboxes without a signed-in user.

Permission ID
1a997f7e-17c6-44c3-adc4-996e0712c777
Catalog state
Enabled
Microsoft permission reference
Contacts-OnPremisesSyncBehavior.ReadWrite.AllDelegatedAdmin consent

Read and update the on-premises sync behavior of contacts

Allows the app to read and update the on-premises sync behavior of contacts a user has permissions to, including their own and shared contacts.

Permission ID
ae180d45-006f-488a-a18a-18b00852edc6
Catalog state
Enabled
Microsoft permission reference
Contacts.ReadApplicationAdmin consent

Read contacts in all mailboxes

Allows the app to read all contacts in all mailboxes without a signed-in user.

Permission ID
089fe4d0-434a-44c5-8827-41ba8a0b17f5
Catalog state
Enabled
Microsoft permission reference
Contacts.ReadDelegatedDelegated consent

Read user contacts

Allows the app to read user contacts.

Permission ID
ff74d97f-43af-4b68-9f2a-b77ee6968c5d
Catalog state
Enabled
Microsoft permission reference
Contacts.Read.SharedDelegatedDelegated consent

Read user and shared contacts

Allows the app to read contacts a user has permissions to access, including their own and shared contacts.

Permission ID
242b9d9e-ed24-4d09-9a52-f43769beb9d4
Catalog state
Enabled
Microsoft permission reference
Contacts.ReadWriteApplicationAdmin consent

Read and write contacts in all mailboxes

Allows the app to create, read, update, and delete all contacts in all mailboxes without a signed-in user.

Permission ID
6918b873-d17a-4dc1-b314-35f528134491
Catalog state
Enabled
Microsoft permission reference
Contacts.ReadWriteDelegatedDelegated consent

Have full access to user contacts

Allows the app to create, read, update, and delete user contacts.

Permission ID
d56682ec-c09e-4743-aaf4-1a3aac4caa21
Catalog state
Enabled
Microsoft permission reference
Contacts.ReadWrite.SharedDelegatedDelegated consent

Read and write user and shared contacts

Allows the app to create, read, update, and delete contacts a user has permissions to, including their own and shared contacts.

Permission ID
afb6c84b-06be-49af-80bb-8f3f77004eab
Catalog state
Enabled
Microsoft permission reference
CopilotSettings-LimitedMode.ReadDelegatedAdmin consent

Read organization-wide copilot limited mode setting

Allows the app to read organization-wide copilot limited mode setting on behalf of the signed-in user.

Permission ID
aeb2982d-632d-4155-b533-18756ab6fdd8
Catalog state
Enabled
Microsoft permission reference
CopilotSettings-LimitedMode.ReadWriteDelegatedAdmin consent

Read and write organization-wide copilot limited mode setting

Allows the app to read and write organization-wide copilot limited mode setting on behalf of the signed-in user.

Permission ID
4704e5b2-0ada-4aa0-b18c-00ad7525bc06
Catalog state
Enabled
Microsoft permission reference
CrossTenantInformation.ReadBasic.AllApplicationAdmin consent

Read cross-tenant basic information

Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem without a signed-in user.

Permission ID
cac88765-0581-4025-9725-5ebc13f729ee
Catalog state
Enabled
Microsoft permission reference
CrossTenantInformation.ReadBasic.AllDelegatedAdmin consent

Read cross-tenant basic information

Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem on behalf of the signed-in user.

Permission ID
81594d25-e88e-49cf-ac8c-fecbff49f994
Catalog state
Enabled
Microsoft permission reference
CrossTenantUserProfileSharing.ReadDelegatedAdmin consent

Read shared cross-tenant user profile and export data

Allows the application to list and query user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export external user data (e.g. customer content or system-generated logs), associated with the current tenant on behalf of the signed-in user.

Permission ID
cb1ba48f-d22b-4325-a07f-74135a62ee41
Catalog state
Enabled
Microsoft permission reference
CrossTenantUserProfileSharing.Read.AllApplicationAdmin consent

Read all shared cross-tenant user profiles and export their data

Allows the application to list and query any shared user profile information associated with the current tenant without a signed-in user. It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant without a signed-in user.

Permission ID
8b919d44-6192-4f3d-8a3b-f86f8069ae3c
Catalog state
Enabled
Microsoft permission reference
CrossTenantUserProfileSharing.Read.AllDelegatedAdmin consent

Read all shared cross-tenant user profiles and export their data

Allows the application to list and query any shared user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on behalf of the signed-in user.

Permission ID
759dcd16-3c90-463c-937e-abf89f991c18
Catalog state
Enabled
Microsoft permission reference
CrossTenantUserProfileSharing.ReadWriteDelegatedAdmin consent

Read shared cross-tenant user profile and export or delete data

Allows the application to list and query user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), associated with the current tenant on behalf of the signed-in user.

Permission ID
eed0129d-dc60-4f30-8641-daf337a39ffd
Catalog state
Enabled
Microsoft permission reference
CrossTenantUserProfileSharing.ReadWrite.AllApplicationAdmin consent

Read all shared cross-tenant user profiles and export or delete their data

Allows the application to list and query any shared user profile information associated with the current tenant without a signed-in user. It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant without a signed-in user.

Permission ID
306785c5-c09b-4ba0-a4ee-023f3da165cb
Catalog state
Enabled
Microsoft permission reference
CrossTenantUserProfileSharing.ReadWrite.AllDelegatedAdmin consent

Read all shared cross-tenant user profiles and export or delete their data

Allows the application to list and query any shared user profile information associated with the current tenant on behalf of the signed-in user. It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on behalf of the signed-in user.

Permission ID
64dfa325-cbf8-48e3-938d-51224a0cac01
Catalog state
Enabled
Microsoft permission reference
CustomAuthenticationExtension.Read.AllApplicationAdmin consent

Read all identity custom authentication extensions

Allows the app to read your organization's custom authentication extnesions, without a signed-in user.

Permission ID
88bb2658-5d9e-454f-aacd-a3933e079526
Catalog state
Enabled
Microsoft permission reference
CustomAuthenticationExtension.Read.AllDelegatedAdmin consent

Read all identity custom authentication extensions

Allows the app to read your organization's custom authentication extensions, on behalf of the signed-in user.

Permission ID
b2052569-c98c-4f36-a5fb-43e5c111e6d0
Catalog state
Enabled
Microsoft permission reference
CustomAuthenticationExtension.ReadWrite.AllApplicationAdmin consent

Read and write all identity custom authentication extensions

Allows the app to read and write your organization's custom authentication extnesions, without a signed-in user.

Permission ID
c2667967-7050-4e7e-b059-4cbbb3811d03
Catalog state
Enabled
Microsoft permission reference
CustomAuthenticationExtension.ReadWrite.AllDelegatedAdmin consent

Read and write all identity custom authentication extensions

Allows the app to read and write your organization's custom authentication extnesions, on behalf of the signed-in user.

Permission ID
8dfcf82f-15d0-43b3-bc78-a958a13a5792
Catalog state
Enabled
Microsoft permission reference
CustomAuthenticationExtension.Receive.PayloadApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
214e810f-fda8-4fd7-a475-29461495eb00
Catalog state
Enabled
Microsoft permission reference
CustomDetection.Read.AllApplicationAdmin consent

Read all custom detection rules

Allows the app to read custom detection rules without a signed-in user.

Permission ID
673a007a-9e0f-4c97-b066-3c0164486909
Catalog state
Enabled
Microsoft permission reference
CustomDetection.Read.AllDelegatedAdmin consent

Read custom detection rules

Allows the app to read custom detection rules on behalf of the signed-in user.

Permission ID
b13ff42e-f321-4d7d-a462-141c46a1b832
Catalog state
Enabled
Microsoft permission reference

Source: Microsoft Graph public permission definitions.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 21 Oct 06:02 UTC · 258 of 260 readable · 257 fully read · documentation 416/439 current