| microsoft.directory/users/appRoleAssignments/read | Read application role assignments for users |
| microsoft.directory/users/deviceForResourceAccount/read | Read deviceForResourceAccount of users |
| microsoft.directory/users/directReports/read | Read the direct reports for users |
| microsoft.directory/users/inviteGuest | Invite guest users |
| microsoft.directory/users/invitedBy/read | Read the user that invited an external user to a tenant |
| microsoft.directory/users/licenseDetails/read | Read license details of users |
| microsoft.directory/users/manager/read | Read manager of users |
| microsoft.directory/users/memberOf/read | Read the group memberships of users |
| microsoft.directory/users/oAuth2PermissionGrants/read | Read delegated permission grants on users |
| microsoft.directory/users/ownedDevices/read | Read owned devices of users |
| microsoft.directory/users/ownedObjects/read | Read owned objects of users |
| microsoft.directory/users/photo/read | Read photo of users |
| microsoft.directory/users/registeredDevices/read | Read registered devices of users |
| microsoft.directory/users/scopedRoleMemberOf/read | Read user's membership of a Microsoft Entra role, that is scoped to an administrative unit |
| microsoft.directory/users/sponsorOf/read | Read all the agents or applications the user is sponsor of |
| microsoft.directory/users/sponsors/read | Read sponsors of users |
| microsoft.directory/users/standard/read | Read basic properties on users |