Skip to content

Commit 12a46d8

Browse files
FaithOmbongiFaithOmbongi
authored
Merge pull request #25926 from microsoftgraph/permissions-reference/2024-12-16
2024-12-16: Automated permissions reference update
2 parents 866fdc3 + 66ab6d5 commit 12a46d8

File tree

1 file changed

+276
-1
lines changed

1 file changed

+276
-1
lines changed

‎concepts/permissions-reference.md

Lines changed: 276 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.localizationpriority: high
77
ms.topic: reference
88
ms.subservice: entra-applications
99
ms.custom: graphiamtop20, scenarios:getting-started
10-
ms.date: 12/09/2024
10+
ms.date: 12/16/2024
1111
#Customer intent: As a developer, I want to learn more about the permissions available in Microsoft Graph, so that I understand the impact of granting specific permissions to my app.
1212
---
1313

@@ -1805,6 +1805,17 @@ GET https://graph.microsoft.com/v1.0/servicePrincipals(appId='00000003-0000-0000
18051805

18061806
---
18071807

1808+
### Device.CreateFromOwnedTemplate
1809+
1810+
| Category | Application | Delegated |
1811+
|--|--|--|
1812+
| Identifier | - | edc92e89-a987-48a9-911a-a7b1967dd7b1 |
1813+
| DisplayText | - | Create devices based on owned device templates |
1814+
| Description | - | Allows the app to create device objects based on device templates owned by the signed-in user, on behalf of the signed in user. |
1815+
| AdminConsentRequired | - | Yes |
1816+
1817+
---
1818+
18081819
### Device.Read
18091820

18101821
| Category | Application | Delegated |
@@ -2031,6 +2042,28 @@ GET https://graph.microsoft.com/v1.0/servicePrincipals(appId='00000003-0000-0000
20312042

20322043
---
20332044

2045+
### DeviceTemplate.Read.All
2046+
2047+
| Category | Application | Delegated |
2048+
|--|--|--|
2049+
| Identifier | dd9febb5-0c6d-419f-b256-3afe12c6adeb | 2bcae0b0-aa93-48e4-a9e4-855482dffdcd |
2050+
| DisplayText | Read all device templates | Read all device templates |
2051+
| Description | Allows the app to read all device templates, without a signed-in user. | Allows the app to read all device templates, on behalf of the signed in user. |
2052+
| AdminConsentRequired | Yes | Yes |
2053+
2054+
---
2055+
2056+
### DeviceTemplate.ReadWrite.All
2057+
2058+
| Category | Application | Delegated |
2059+
|--|--|--|
2060+
| Identifier | 9fadb66e-6421-4744-aede-4ab6fb98a884 | 2d372e98-f1ae-406c-a157-2ea83f6f5e4a |
2061+
| DisplayText | Read and write all device templates | Read and write all device templates |
2062+
| Description | Allows the app to create, read, update and delete any device template, without a signed-in user. It also allows the app to add or remove owners on any device template. | Allows the app to create, read, update and delete the device template, on behalf of the signed in user. It also allows the app to add or remove owners on any device template. |
2063+
| AdminConsentRequired | Yes | Yes |
2064+
2065+
---
2066+
20342067
### Directory.AccessAsUser.All
20352068

20362069
| Category | Application | Delegated |
@@ -3752,6 +3785,28 @@ GET https://graph.microsoft.com/v1.0/servicePrincipals(appId='00000003-0000-0000
37523785

37533786
---
37543787

3788+
### MutualTlsOauthConfiguration.Read.All
3789+
3790+
| Category | Application | Delegated |
3791+
|--|--|--|
3792+
| Identifier | 6daaff82-2880-496d-9d80-57e8e31195e2 | 51ae584e-e736-4718-897b-10af70f8e3cc |
3793+
| DisplayText | Read all configurations used for mutual-TLS client authentication. | Read all configurations used for mutual-TLS client authentication. |
3794+
| Description | Allows the app to read configuration used for OAuth 2.0 mutual-TLS client authentication, without a signed-in user. This includes reading trusted certificate authorities. | Allows the app to read configuration used for OAuth 2.0 mutual-TLS client authentication, on behalf of the signed-in user. This includes reading trusted certificate authorities. |
3795+
| AdminConsentRequired | Yes | Yes |
3796+
3797+
---
3798+
3799+
### MutualTlsOauthConfiguration.ReadWrite.All
3800+
3801+
| Category | Application | Delegated |
3802+
|--|--|--|
3803+
| Identifier | 78bbf8cf-07d8-45ba-b0eb-1a7b48efbcf1 | a51115bc-f64f-498f-bcee-00dcd28f4a03 |
3804+
| DisplayText | Read and write all configurations used for mutual-TLS client authentication. | Read and write all configurations used for mutual-TLS client authentication. |
3805+
| Description | Allows the app to read and update configuration used for OAuth 2.0 mutual-TLS client authentication, without a signed-in user. This includes reading and updating trusted certificate authorities. | Allows the app to read and update configuration used for OAuth 2.0 mutual-TLS client authentication, on behalf of the signed-in user. This includes adding and updating trusted certificate authorities. |
3806+
| AdminConsentRequired | Yes | Yes |
3807+
3808+
---
3809+
37553810
### NetworkAccess-Reports.Read.All
37563811

37573812
| Category | Application | Delegated |
@@ -5311,6 +5366,28 @@ GET https://graph.microsoft.com/v1.0/servicePrincipals(appId='00000003-0000-0000
53115366

53125367
---
53135368

5369+
### RiskPreventionProviders.Read.All
5370+
5371+
| Category | Application | Delegated |
5372+
|--|--|--|
5373+
| Identifier | 2a6baefd-edea-4ff6-b24e-bebcaa27a50d | e197c06f-ae7b-4398-b0a2-89f76ebca159 |
5374+
| DisplayText | Read all identity risk prevention providers | Read all identity risk prevention providers |
5375+
| Description | Allows the app to read your organization's risk prevention providers, without a signed-in user. | Allows the app to read your organization's risk prevention providers, on behalf of the signed-in user. |
5376+
| AdminConsentRequired | Yes | Yes |
5377+
5378+
---
5379+
5380+
### RiskPreventionProviders.ReadWrite.All
5381+
5382+
| Category | Application | Delegated |
5383+
|--|--|--|
5384+
| Identifier | 7fc7225d-eb37-4c39-90f3-a33a57cf1081 | 2a7babba-9623-4109-bc9c-79728cf3bb4f |
5385+
| DisplayText | Read and write all identity risk prevention providers | Read and write all identity risk prevention providers |
5386+
| Description | Allows the app to read and write your organization's risk prevention providers, without a signed-in user. | Allows the app to read and write your organization's risk prevention providers, on behalf of the signed-in user. |
5387+
| AdminConsentRequired | Yes | Yes |
5388+
5389+
---
5390+
53145391
### RoleAssignmentSchedule.Read.Directory
53155392

53165393
| Category | Application | Delegated |
@@ -6281,6 +6358,72 @@ GET https://graph.microsoft.com/v1.0/servicePrincipals(appId='00000003-0000-0000
62816358

62826359
---
62836360

6361+
### TeamsAppInstallation.ManageSelectedForChat
6362+
6363+
| Category | Application | Delegated |
6364+
|--|--|--|
6365+
| Identifier | - | d1ba22c6-3f02-4c91-addb-bc3399bcca88 |
6366+
| DisplayText | - | Manage installation and permission grants of selected Teams apps in chats |
6367+
| Description | - | Allows the app to read, install, upgrade, and uninstall selected Teams apps in chats the signed-in user can access. Gives the ability to manage permission grants for accessing those specific chats' data. |
6368+
| AdminConsentRequired | - | Yes |
6369+
6370+
---
6371+
6372+
### TeamsAppInstallation.ManageSelectedForChat.All
6373+
6374+
| Category | Application | Delegated |
6375+
|--|--|--|
6376+
| Identifier | 22b74aab-d9e4-46f7-9424-f24b42307227 | - |
6377+
| DisplayText | Manage installation and permission grants of selected Teams apps in all chats | - |
6378+
| Description | Allows the app to read, install, upgrade, and uninstall selected Teams apps in any chat, without a signed-in user. Gives the ability to manage permission grants for accessing those specific chats' data. | - |
6379+
| AdminConsentRequired | Yes | - |
6380+
6381+
---
6382+
6383+
### TeamsAppInstallation.ManageSelectedForTeam
6384+
6385+
| Category | Application | Delegated |
6386+
|--|--|--|
6387+
| Identifier | - | c67b2d7e-6b80-4218-938a-05e73058e42d |
6388+
| DisplayText | - | Manage installation and permission grants of selected Teams apps in teams |
6389+
| Description | - | Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Gives the ability to manage permission grants for accessing those specific teams' data. |
6390+
| AdminConsentRequired | - | Yes |
6391+
6392+
---
6393+
6394+
### TeamsAppInstallation.ManageSelectedForTeam.All
6395+
6396+
| Category | Application | Delegated |
6397+
|--|--|--|
6398+
| Identifier | b448d252-1f26-4227-b6ff-21ab510975a2 | - |
6399+
| DisplayText | Manage installation and permission grants of selected Teams apps in all teams | - |
6400+
| Description | Allows the app to read, install, upgrade, and uninstall selected Teams apps in any team, without a signed-in user. Gives the ability to manage permission grants for accessing those specific teams' data. | - |
6401+
| AdminConsentRequired | Yes | - |
6402+
6403+
---
6404+
6405+
### TeamsAppInstallation.ManageSelectedForUser
6406+
6407+
| Category | Application | Delegated |
6408+
|--|--|--|
6409+
| Identifier | - | 830c2bd9-c335-4caf-bf83-c07fa8a23ef1 |
6410+
| DisplayText | - | Manage installation and permission grants of selected Teams apps in users' personal scope |
6411+
| Description | - | Allows the app to read, install, upgrade, and uninstall seleected Teams apps in user accounts, on behalf of the signed-in user. Gives the ability to manage permission grants for accessing those specific users' data. |
6412+
| AdminConsentRequired | - | Yes |
6413+
6414+
---
6415+
6416+
### TeamsAppInstallation.ManageSelectedForUser.All
6417+
6418+
| Category | Application | Delegated |
6419+
|--|--|--|
6420+
| Identifier | e97a9235-5b3c-43c4-b37d-6786a173fae4 | - |
6421+
| DisplayText | Manage installation and permission grants of selected Teams apps for all user accounts | - |
6422+
| Description | Allows the app to read, install, upgrade, and uninstall selected Teams apps in any user account, without a signed-in user. Gives the ability to manage permission grants for accessing those specific users' data. | - |
6423+
| AdminConsentRequired | Yes | - |
6424+
6425+
---
6426+
62846427
### TeamsAppInstallation.Read.All
62856428

62866429
| Category | Application | Delegated |
@@ -6358,6 +6501,72 @@ GET https://graph.microsoft.com/v1.0/servicePrincipals(appId='00000003-0000-0000
63586501

63596502
---
63606503

6504+
### TeamsAppInstallation.ReadSelectedForChat
6505+
6506+
| Category | Application | Delegated |
6507+
|--|--|--|
6508+
| Identifier | - | 0f3420c2-c6ec-46de-ab72-fd51267087d5 |
6509+
| DisplayText | - | Read selected installed Teams apps in chats |
6510+
| Description | - | Allows the app to read the selected Teams apps that are installed in chats the signed-in user can access. Does not give the ability to read application-specific settings. |
6511+
| AdminConsentRequired | - | Yes |
6512+
6513+
---
6514+
6515+
### TeamsAppInstallation.ReadSelectedForChat.All
6516+
6517+
| Category | Application | Delegated |
6518+
|--|--|--|
6519+
| Identifier | 53d40ddb-9b27-4c97-b800-985be6041990 | - |
6520+
| DisplayText | Read selected installed Teams apps in all chats | - |
6521+
| Description | Allows the app to read the selected Teams apps that are installed in any chat, without a signed-in user. Does not give the ability to read application-specific settings. | - |
6522+
| AdminConsentRequired | Yes | - |
6523+
6524+
---
6525+
6526+
### TeamsAppInstallation.ReadSelectedForTeam
6527+
6528+
| Category | Application | Delegated |
6529+
|--|--|--|
6530+
| Identifier | - | b55df1c0-db20-435b-aef2-afe6ed487e16 |
6531+
| DisplayText | - | Read selected installed Teams apps in teams |
6532+
| Description | - | Allows the app to read the selected Teams apps that are installed in teams the signed-in user can access. Does not give the ability to read application-specific settings. |
6533+
| AdminConsentRequired | - | Yes |
6534+
6535+
---
6536+
6537+
### TeamsAppInstallation.ReadSelectedForTeam.All
6538+
6539+
| Category | Application | Delegated |
6540+
|--|--|--|
6541+
| Identifier | 93c6a289-70fd-489e-a053-6cf8f7d772f6 | - |
6542+
| DisplayText | Read selected installed Teams apps in all teams | - |
6543+
| Description | Allows the app to read the selected Teams apps that are installed in any team, without a signed-in user. Does not give the ability to read application-specific settings. | - |
6544+
| AdminConsentRequired | Yes | - |
6545+
6546+
---
6547+
6548+
### TeamsAppInstallation.ReadSelectedForUser
6549+
6550+
| Category | Application | Delegated |
6551+
|--|--|--|
6552+
| Identifier | - | fe2e4e1d-101f-4fb2-9cb1-9d6659db45d4 |
6553+
| DisplayText | - | Read user's selected installed Teams apps |
6554+
| Description | - | Allows the app to read the selected Teams apps that are installed for the signed-in user. Does not give the ability to read application-specific settings. |
6555+
| AdminConsentRequired | - | Yes |
6556+
6557+
---
6558+
6559+
### TeamsAppInstallation.ReadSelectedForUser.All
6560+
6561+
| Category | Application | Delegated |
6562+
|--|--|--|
6563+
| Identifier | 44fb0e7c-1f9a-47f1-bb9e-7f92d48ed288 | - |
6564+
| DisplayText | Read selected installed Teams apps for all users | - |
6565+
| Description | Allows an app to read, install, upgrade, and uninstall selected apps to any user, without a signed-in user. | - |
6566+
| AdminConsentRequired | Yes | - |
6567+
6568+
---
6569+
63616570
### TeamsAppInstallation.ReadWriteAndConsentForChat
63626571

63636572
| Category | Application | Delegated |
@@ -6556,6 +6765,72 @@ GET https://graph.microsoft.com/v1.0/servicePrincipals(appId='00000003-0000-0000
65566765

65576766
---
65586767

6768+
### TeamsAppInstallation.ReadWriteSelectedForChat
6769+
6770+
| Category | Application | Delegated |
6771+
|--|--|--|
6772+
| Identifier | - | 690aa3b6-4b71-41c2-a990-77a8c4768d2b |
6773+
| DisplayText | - | Manage selected Teams apps installed in chats |
6774+
| Description | - | Allows the app to read, install, upgrade, and uninstall selected Teams apps in chats the signed-in user can access. Does not give the ability to read application-specific settings. |
6775+
| AdminConsentRequired | - | Yes |
6776+
6777+
---
6778+
6779+
### TeamsAppInstallation.ReadWriteSelectedForChat.All
6780+
6781+
| Category | Application | Delegated |
6782+
|--|--|--|
6783+
| Identifier | 25bbeaad-04be-4207-83ed-a263aae76ddf | - |
6784+
| DisplayText | Manage selected installed Teams apps in all chats | - |
6785+
| Description | Allows the app to read, install, upgrade, and uninstall selected Teams apps in any chat, without a signed-in user. Does not give the ability to read application-specific settings. | - |
6786+
| AdminConsentRequired | Yes | - |
6787+
6788+
---
6789+
6790+
### TeamsAppInstallation.ReadWriteSelectedForTeam
6791+
6792+
| Category | Application | Delegated |
6793+
|--|--|--|
6794+
| Identifier | - | 9131c833-9a49-4c54-b38f-615ecfc4fc69 |
6795+
| DisplayText | - | Manage selected Teams apps installed in teams |
6796+
| Description | - | Allows the app to read, install, upgrade, and uninstall selected Teams apps in teams the signed-in user can access. Does not give the ability to read application-specific settings. |
6797+
| AdminConsentRequired | - | Yes |
6798+
6799+
---
6800+
6801+
### TeamsAppInstallation.ReadWriteSelectedForTeam.All
6802+
6803+
| Category | Application | Delegated |
6804+
|--|--|--|
6805+
| Identifier | 7b5823ae-d0f2-424d-b90c-d843ffada7d9 | - |
6806+
| DisplayText | Manage selected installed Teams apps in all teams | - |
6807+
| Description | Allows the app to read, install, upgrade, and uninstall selected Teams apps in any team, without a signed-in user. Does not give the ability to read application-specific settings. | - |
6808+
| AdminConsentRequired | Yes | - |
6809+
6810+
---
6811+
6812+
### TeamsAppInstallation.ReadWriteSelectedForUser
6813+
6814+
| Category | Application | Delegated |
6815+
|--|--|--|
6816+
| Identifier | - | ea819e27-c92a-4118-b83b-4540b125d744 |
6817+
| DisplayText | - | Manage selected Teams apps installed for a user |
6818+
| Description | - | Allows the app to read, install, upgrade, and uninstall selected Teams apps installed for the signed in user. Does not give the ability to read application-specific settings. |
6819+
| AdminConsentRequired | - | Yes |
6820+
6821+
---
6822+
6823+
### TeamsAppInstallation.ReadWriteSelectedForUser.All
6824+
6825+
| Category | Application | Delegated |
6826+
|--|--|--|
6827+
| Identifier | 650a76ec-4118-4b25-9d3a-1f98048a5ee0 | - |
6828+
| DisplayText | Manage selected Teams apps installed for all users | - |
6829+
| Description | Allows the app to read, install, upgrade, and uninstall selected Teams apps for any user, without a signed-in user. Does not give the ability to read application-specific settings. | - |
6830+
| AdminConsentRequired | Yes | - |
6831+
6832+
---
6833+
65596834
### TeamsAppInstallation.ReadWriteSelfForChat
65606835

65616836
| Category | Application | Delegated |

0 commit comments

Comments
 (0)