Skip to content

Commit 6d97dab

Browse files
FaithOmbongiFaithOmbongi
authored
Merge pull request #26736 from microsoftgraph/permissions-reference/2025-05-26
2025-05-26: Automated permissions reference update
2 parents 94e363d + 93c2e44 commit 6d97dab

File tree

1 file changed

+133
-1
lines changed

1 file changed

+133
-1
lines changed

‎concepts/permissions-reference.md

Lines changed: 133 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ ms.localizationpriority: high
77
ms.topic: reference
88
ms.subservice: entra-applications
99
ms.custom: graphiamtop20, scenarios:getting-started
10-
ms.date: 05/19/2025
10+
ms.date: 05/26/2025
1111
#Customer intent: As a developer, I want to learn more about the permissions available in Microsoft Graph, so that I understand the impact of granting specific permissions to my app.
1212
---
1313

@@ -389,6 +389,28 @@ GET https://graph.microsoft.com/v1.0/servicePrincipals(appId='00000003-0000-0000
389389

390390
---
391391

392+
### AuditActivity.Read
393+
394+
| Category | Application | Delegated |
395+
|--|--|--|
396+
| Identifier | 99bc85fb-e857-4220-9f8c-3a1c83148d2e | 16786f81-40d2-4116-bb26-d1a753bf0b20 |
397+
| DisplayText | Read activity audit log from the audit store. | Read activity audit log from the audit store. |
398+
| Description | Read activity audit log from the audit store. | Read activity audit log from the audit store. |
399+
| AdminConsentRequired | Yes | Yes |
400+
401+
---
402+
403+
### AuditActivity.Write
404+
405+
| Category | Application | Delegated |
406+
|--|--|--|
407+
| Identifier | f6318678-2713-4bb6-b123-233e7336c1bd | a78fd341-0672-4792-a8ae-a5925b2546eb |
408+
| DisplayText | Upload activity audit logs to the audit store. | Upload activity audit logs to the audit store. |
409+
| Description | Allows the application to upload bulk activity audit logs to the audit store. | Allows the application to upload bulk activity audit logs to the audit store. |
410+
| AdminConsentRequired | Yes | Yes |
411+
412+
---
413+
392414
### AuditLog.Read.All
393415

394416
| Category | Application | Delegated |
@@ -1557,6 +1579,50 @@ GET https://graph.microsoft.com/v1.0/servicePrincipals(appId='00000003-0000-0000
15571579

15581580
---
15591581

1582+
### Content.Process.All
1583+
1584+
| Category | Application | Delegated |
1585+
|--|--|--|
1586+
| Identifier | 5ad511bf-571c-4ef6-8c3c-85b94b85df98 | 7e2467d1-f874-46bb-828e-24cb06b29d3f |
1587+
| DisplayText | Process content for data security, governance and compliance | Process content for data security, governance and compliance |
1588+
| Description | Allows the app to process and evaluate content for data security, governance and compliance outcomes at tenant scope. | Allows the app to process and evaluate content for data security, governance and compliance outcomes at tenant scope. |
1589+
| AdminConsentRequired | Yes | Yes |
1590+
1591+
---
1592+
1593+
### Content.Process.User
1594+
1595+
| Category | Application | Delegated |
1596+
|--|--|--|
1597+
| Identifier | 24ceb246-ad29-4680-90b4-3e91ffad15eb | 1d787a13-f750-4ad6-875a-fcbd2725596b |
1598+
| DisplayText | Process content for data security, governance and compliance | Process content for data security, governance and compliance |
1599+
| Description | Allows the app to process and evaluate content for data security, governance and compliance outcomes for a user. | Allows the app to process and evaluate content for data security, governance and compliance outcomes for a user. |
1600+
| AdminConsentRequired | Yes | Yes |
1601+
1602+
---
1603+
1604+
### ContentActivity.Read
1605+
1606+
| Category | Application | Delegated |
1607+
|--|--|--|
1608+
| Identifier | 368425e7-6954-4f5a-9d92-90b75bd580c9 | 62c55b2f-a2b1-4312-8385-be57afd901b4 |
1609+
| DisplayText | Read contents activity audit log from the audit store. | Read contents activity audit log from the audit store. |
1610+
| Description | Read contents activity audit log from the audit store. | Read contents activity audit log from the audit store. |
1611+
| AdminConsentRequired | Yes | Yes |
1612+
1613+
---
1614+
1615+
### ContentActivity.Write
1616+
1617+
| Category | Application | Delegated |
1618+
|--|--|--|
1619+
| Identifier | 2932e07a-3c29-44e4-bb36-6d0fc176387f | 948caae6-152a-48cd-a746-4844af30e8e9 |
1620+
| DisplayText | Upload content activity audit logs to the audit store. | Upload contents activity audit logs to the audit store. |
1621+
| Description | Allows the application to upload bulk contents activity audit logs to the audit store. | Allows the application to upload bulk contents activity audit logs to the audit store. |
1622+
| AdminConsentRequired | Yes | Yes |
1623+
1624+
---
1625+
15601626
### CopilotSettings-LimitedMode.Read
15611627

15621628
| Category | Application | Delegated |
@@ -5443,6 +5509,39 @@ GET https://graph.microsoft.com/v1.0/servicePrincipals(appId='00000003-0000-0000
54435509

54445510
---
54455511

5512+
### ProtectionScopes.Compute.All
5513+
5514+
| Category | Application | Delegated |
5515+
|--|--|--|
5516+
| Identifier | e5a76501-dbb0-492c-ab55-5d09e8837263 | 98f5a27a-539a-48bc-a597-f78e9e1e76bf |
5517+
| DisplayText | Compute Purview policies at tenant scope | Compute Purview policies at tenant scope |
5518+
| Description | Allows the app to identify Purview data protection, compliance and governance policy scopes defined for all users across tenant. | Allows the app to identify Purview data protection, compliance and governance policy scopes defined for all users across tenant. |
5519+
| AdminConsentRequired | Yes | Yes |
5520+
5521+
---
5522+
5523+
### ProtectionScopes.Compute.User
5524+
5525+
| Category | Application | Delegated |
5526+
|--|--|--|
5527+
| Identifier | fe696d63-5e1f-4515-8232-cccc316903c6 | 4fc04d16-a9fc-4c5e-8da4-79b6c33638a4 |
5528+
| DisplayText | Compute Purview policies for an individual user | Compute Purview policies for an individual user |
5529+
| Description | Allows the app to identify Purview data protection, compliance and governance policy scopes defined for an individual user. | Allows the app to identify Purview data protection, compliance and governance policy scopes defined for an individual user. |
5530+
| AdminConsentRequired | Yes | Yes |
5531+
5532+
---
5533+
5534+
### ProvisioningLog.Read.All
5535+
5536+
| Category | Application | Delegated |
5537+
|--|--|--|
5538+
| Identifier | 091937d3-3e38-47a1-8649-b2f99d3035f1 | 95aec97b-cf27-4a8d-a67d-42f60b5b38ef |
5539+
| DisplayText | Read all provisioning log data | Read provisioning log data |
5540+
| Description | Allows the app to read and query your provisioning log activities, without a signed-in user. | Allows the app to read and query your provisioning log activities, on behalf of the signed-in user. |
5541+
| AdminConsentRequired | Yes | Yes |
5542+
5543+
---
5544+
54465545
### PublicKeyInfrastructure.Read.All
54475546

54485547
| Category | Application | Delegated |
@@ -6094,6 +6193,39 @@ GET https://graph.microsoft.com/v1.0/servicePrincipals(appId='00000003-0000-0000
60946193

60956194
---
60966195

6196+
### SensitivityLabel.Evaluate
6197+
6198+
| Category | Application | Delegated |
6199+
|--|--|--|
6200+
| Identifier | 57f0b71b-a759-45a0-9a0f-cc099fbd9a44 | - |
6201+
| DisplayText | Evaluate sensitivity labels | - |
6202+
| Description | Allow the app to determine if there is any sensitivity label to be applied automatically to the content or recommended to the user for manual application, without a signed-in user. | - |
6203+
| AdminConsentRequired | Yes | - |
6204+
6205+
---
6206+
6207+
### SensitivityLabel.Read
6208+
6209+
| Category | Application | Delegated |
6210+
|--|--|--|
6211+
| Identifier | 3b8e7aad-f6e3-4299-83f8-6fc6a5777f0b | - |
6212+
| DisplayText | Get labels application scope. | - |
6213+
| Description | Allows the app to get sensitivity labels. | - |
6214+
| AdminConsentRequired | Yes | - |
6215+
6216+
---
6217+
6218+
### SensitivityLabels.Read.All
6219+
6220+
| Category | Application | Delegated |
6221+
|--|--|--|
6222+
| Identifier | e46a01e9-b2cf-4d89-8424-bcdc6dd445ab | - |
6223+
| DisplayText | Get labels tenant scope. | - |
6224+
| Description | Allows the app to get sensitivity labels. | - |
6225+
| AdminConsentRequired | Yes | - |
6226+
6227+
---
6228+
60976229
### ServiceActivity-Exchange.Read.All
60986230

60996231
| Category | Application | Delegated |

0 commit comments

Comments
 (0)