"Id","Value","AdminConsentDisplayName","AdminConsentDescription"
"ebfcd32b-babb-40f4-a14b-42706e83bd28","AccessReview.Read.All","Read all access reviews that user can access","Allows the app to read access reviews, reviewers, decisions and settings that the signed-in user has access to in the organization."
"e4aa47b9-9a69-4109-82ed-36ec70d85ff1","AccessReview.ReadWrite.All","Manage all access reviews that user can access","Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings that the signed-in user has access to in the organization."
"5af8c3f5-baca-439a-97b0-ea58a435e269","AccessReview.ReadWrite.Membership","Manage access reviews for group and app memberships","Allows the app to read, update, delete and perform actions on access reviews, reviewers, decisions and settings for group and app memberships that the signed-in user has access to in the organization."
"9084c10f-a2d6-4713-8732-348def50fe02","Acronym.Read.All","Read all acronyms that the user can access","Allows an app to read all acronyms that the signed-in user can access."
"3361d15d-be43-4de6-b441-3c746d05163d","AdministrativeUnit.Read.All","Read administrative units","Allows the app to read administrative units and administrative unit membership on behalf of the signed-in user."
"7b8a2d34-6b3f-4542-a343-54651608ad81","AdministrativeUnit.ReadWrite.All","Read and write administrative units","Allows the app to create, read, update, and delete administrative units and manage administrative unit membership on behalf of the signed-in user."
"af2819c9-df71-4dd3-ade7-4d7c9dc653b7","Agreement.Read.All","Read all terms of use agreements","Allows the app to read terms of use agreements on behalf of the signed-in user."
"ef4b5d93-3104-4664-9053-a5c49ab44218","Agreement.ReadWrite.All","Read and write all terms of use agreements","Allows the app to read and write terms of use agreements on behalf of the signed-in user."
"0b7643bb-5336-476f-80b5-18fbfbc91806","AgreementAcceptance.Read","Read user terms of use acceptance statuses","Allows the app to read terms of use acceptance statuses on behalf of the signed-in user."
"a66a5341-e66e-4897-9d52-c2df58c2bfb9","AgreementAcceptance.Read.All","Read terms of use acceptance statuses that user can access","Allows the app to read terms of use acceptance statuses on behalf of the signed-in user."
"e03cf23f-8056-446a-8994-7d93dfc8b50e","Analytics.Read","Read user activity statistics","Allows the app to read the signed-in user's activity statistics, such as how much time the user has spent on emails, in meetings, or in chat sessions."
"1b6ff35f-31df-4332-8571-d31ea5a4893f","APIConnectors.Read.All","Read API connectors for authentication flows","Allows the app to read the API connectors used in user authentication flows, on behalf of the signed-in user."
"c67b52c5-7c69-48b6-9d48-7b3af3ded914","APIConnectors.ReadWrite.All","Read and write API connectors for authentication flows","Allows the app to read, create and manage the API connectors used in user authentication flows, on behalf of the signed-in user."
"88e58d74-d3df-44f3-ad47-e89edf4472e4","AppCatalog.Read.All","Read all app catalogs","Allows the app to read the apps in the app catalogs."
"1ca167d5-1655-44a1-8adf-1414072e1ef9","AppCatalog.ReadWrite.All","Read and write to all app catalogs","Allows the app to create, read, update, and delete apps in the app catalogs."
"3db89e36-7fa6-4012-b281-85f3d9d9fd2e","AppCatalog.Submit","Submit application packages to the catalog and cancel pending submissions","Allows the app to submit application packages to the catalog and cancel submissions that are pending review on behalf of the signed-in user."
"af281d3a-030d-4122-886e-146fb30a0413","AppCertTrustConfiguration.Read.All","Read the trusted certificate authority configuration for applications","Allows the app to read the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on behalf of the signed-in user."
"4bae2ed4-473e-4841-a493-9829cfd51d48","AppCertTrustConfiguration.ReadWrite.All","Read and write the trusted certificate authority configuration for applications","Allows the app to create, read, update and delete the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on behalf of the signed-in user."
"ffa91d43-2ad8-45cc-b592-09caddeb24bb","Application-RemoteDesktopConfig.ReadWrite.All","Read and write the remote desktop security configuration for apps","Allows the app to read and write other apps' remote desktop security configuration, on behalf of the signed-in user."
"c79f8feb-a9db-4090-85f9-90d820caa0eb","Application.Read.All","Read applications","Allows the app to read applications and service principals on behalf of the signed-in user."
"bdfbf15f-ee85-4955-8675-146e8e5296b5","Application.ReadWrite.All","Read and write all applications","Allows the app to create, read, update and delete applications and service principals on behalf of the signed-in user. Does not allow management of consent grants."
"84bccea3-f856-4a8a-967b-dbe0a3d53a64","AppRoleAssignment.ReadWrite.All","Manage app permission grants and app role assignments","Allows the app to manage permission grants for application permissions to any API (including Microsoft Graph) and application assignments for any app, on behalf of the signed-in user."
"104a7a4b-ca76-4677-b7e7-2f4bc482f381","AttackSimulation.Read.All","Read attack simulation data of an organization","Allows the app to read attack simulation and training data for an organization for the signed-in user."
"27608d7c-2c66-4cad-a657-951d575f5a60","AttackSimulation.ReadWrite.All","Read, create, and update attack simulation data of an organization","Allows the app to read, create, and update attack simulation and training data for an organization for the signed-in user."
"e4c9e354-4dc5-45b8-9e7c-e1393b0b1a20","AuditLog.Read.All","Read audit log data","Allows the app to read and query your audit log activities, on behalf of the signed-in user."
"ba78b16f-1e01-41b6-89ca-73e0a32b304c","AuditLogsQuery-CRM.Read.All","Read audit logs data from Dynamics CRM workload","Allows the app to read and query audit logs from Dynamics CRM workload, on behalf of the signed-in user."
"ee3409fe-617f-43cf-bd1e-fc8b38049e69","AuditLogsQuery-Endpoint.Read.All","Read audit logs data from Endpoint Data Loss Prevention workload","Allows the app to read and query audit logs from Endpoint Data Loss Precention workload, on behalf of the signed-in user."
"5ff2f415-e0f1-4d11-bfd0-6d87c0f667fd","AuditLogsQuery-Entra.Read.All","Read audit logs data from Entra (Azure AD) workload","Allows the app to read and query audit logs from Entra (Azure AD) workload, on behalf of the signed-in user."
"6c8c71d2-c7e1-45b0-ac6d-1d2724fba6ae","AuditLogsQuery-Exchange.Read.All","Read audit logs data from Exchange workload","Allows the app to read and query audit logs from Exchange workload, on behalf of a signed-in user."
"4a72c235-a50d-4870-b598-fd88fd1fa074","AuditLogsQuery-OneDrive.Read.All","Read audit logs data from OneDrive workload","Allows the app to read and query audit logs from OneDrive workload, on behalf of a signed-in user."
"30630b65-ed12-4a81-9130-e3a964109fae","AuditLogsQuery-SharePoint.Read.All","Read audit logs data from SharePoint workload","Allows the app to read and query audit logs from SharePoint workload, on behalf of a signed-in user."
"1d9e7ac3-0eca-442c-82f9-e92625af6e6d","AuditLogsQuery.Read.All","Read audit logs data from all services","Allows the app to read and query audit logs from all services, on behalf of a signed-in user"
"57b030f1-8c35-469c-b0d9-e4a077debe70","AuthenticationContext.Read.All","Read all authentication context information","Allows the app to read all authentication context information in your organization on behalf of the signed-in user."
"ba6d575a-1344-4516-b777-1404f5593057","AuthenticationContext.ReadWrite.All","Read and write all authentication context information","Allows the app to read and update all authentication context information in your organization on behalf of the signed-in user."
"2bf6d319-dfca-4c22-9879-f88dcfaee6be","BillingConfiguration.ReadWrite.All","Read and write application billing configuration","Allows the app to read and write the billing configuration on all applications on behalf of the signed-in user. "
"b27a61ec-b99c-4d6a-b126-c4375d08ae30","BitlockerKey.Read.All","Read BitLocker keys","Allows the app to read BitLocker keys on behalf of the signed-in user, for their owned devices. Allows read of the recovery key."
"5a107bfc-4f00-4e1a-b67e-66451267bc68","BitlockerKey.ReadBasic.All","Read BitLocker keys basic information","Allows the app to read basic BitLocker key properties on behalf of the signed-in user, for their owned devices. Does not allow read of the recovery key itself."
"7f36b48e-542f-4d3b-9bcb-8406f0ab9fdb","Bookings.Manage.All","Manage bookings information","Allows an app to read, write and manage bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user."
"33b1df99-4b29-4548-9339-7a7b83eaeebc","Bookings.Read.All","Read bookings information","Allows an app to read bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user."
"948eb538-f19d-4ec5-9ccc-f059e1ea4c72","Bookings.ReadWrite.All","Read and write bookings information","Allows an app to read and write bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user. Does not allow create, delete and publish of booking businesses."
"02a5a114-36a6-46ff-a102-954d89d9ab02","BookingsAppointment.ReadWrite.All","Read and write booking appointments","Allows an app to read and write bookings appointments and customers, and additionally allows read businesses information, services, and staff on behalf of the signed-in user."
"98b17b35-f3b1-4849-a85f-9f13733002f0","Bookmark.Read.All","Read all bookmarks that the user can access","Allows an app to read all bookmarks that the signed-in user can access."
"fb9be2b7-a7fc-4182-aec1-eda4597c43d5","BrowserSiteLists.Read.All","Read browser site lists for your organization","Allows an app to read the browser site lists configured for your organization, on behalf of the signed-in user."
"83b34c85-95bf-497b-a04e-b58eca9d49d0","BrowserSiteLists.ReadWrite.All","Read and write browser site lists for your organization","Allows an app to read and write the browser site lists configured for your organization, on behalf of the signed-in user."
"d16480b2-e469-4118-846b-d3d177327bee","BusinessScenarioConfig.Read.All","Read business scenario configurations","Allows the app to read the configurations of your organization's business scenarios, on behalf of the signed-in user."
"c47e7b6e-d6f1-4be9-9ffd-1e00f3e32892","BusinessScenarioConfig.Read.OwnedBy","Read business scenario configurations this app creates or owns","Allows the app to read the configurations of business scenarios it owns, on behalf of the signed-in user."
"755e785b-b658-446f-bb22-5a46abd029ea","BusinessScenarioConfig.ReadWrite.All","Read and write business scenario configurations","Allows the app to read and write the configurations of your organization's business scenarios, on behalf of the signed-in user."
"b3b7fcff-b4d4-4230-bf6f-90bd91285395","BusinessScenarioConfig.ReadWrite.OwnedBy","Read and write business scenario configurations this app creates or owns","Allows the app to create new business scenarios and fully manage the configurations of scenarios it owns, on behalf of the signed-in user."
"25b265c4-5d34-4e44-952d-b567f6d3b96d","BusinessScenarioData.Read.OwnedBy","Read all data for business scenarios this app creates or owns","Allows the app to read all data associated with the business scenarios it owns. Data access will be attributed to the signed-in user."
"19932d57-2952-4c60-8634-3655c79fc527","BusinessScenarioData.ReadWrite.OwnedBy","Read and write all data for business scenarios this app creates or owns","Allows the app to fully manage all data associated with the business scenarios it owns. Data access and changes will be attributed to the signed-in user."
"465a38f9-76ea-45b9-9f34-9e8b0d4b0b42","Calendars.Read","Read user calendars ","Allows the app to read events in user calendars . "
"2b9c4092-424d-4249-948d-b43879977640","Calendars.Read.Shared","Read user and shared calendars","Allows the app to read events in all calendars that the user can access, including delegate and shared calendars."
"662d75ba-a364-42ad-adee-f5f880ea4878","Calendars.ReadBasic","Read basic details of user calendars","Allows the app to read events in user calendars, except for properties such as body, attachments, and extensions."
"1ec239c2-d7c9-4623-a91a-a9775856bb36","Calendars.ReadWrite","Have full access to user calendars ","Allows the app to create, read, update, and delete events in user calendars. "
"12466101-c9b8-439a-8589-dd09ee67e8e9","Calendars.ReadWrite.Shared","Read and write user and shared calendars","Allows the app to create, read, update and delete events in all calendars in the organization user has permissions to access. This includes delegate and shared calendars."
"43431c03-960e-400f-87c6-8f910321dca3","CallEvents.Read","Read call event data","Allows the app to read call event information for an organization for the signed-in user."
"101147cf-4178-4455-9d58-02b5c164e759","Channel.Create","Create channels","Create channels in any team, on behalf of the signed-in user."
"cc83893a-e232-4723-b5af-bd0b01bcfe65","Channel.Delete.All","Delete channels","Delete channels in any team, on behalf of the signed-in user."
"9d8982ae-4365-4f57-95e9-d6032a4c0b87","Channel.ReadBasic.All","Read the names and descriptions of channels","Read channel names and channel descriptions, on behalf of the signed-in user."
"2eadaff8-0bce-4198-a6b9-2cfc35a30075","ChannelMember.Read.All","Read the members of channels","Read the members of channels, on behalf of the signed-in user."
"0c3e411a-ce45-4cd1-8f30-f99a3efa7b11","ChannelMember.ReadWrite.All","Add and remove members from channels","Add and remove members from channels, on behalf of the signed-in user. Also allows changing a member's role, for example from owner to non-owner."
"2b61aa8a-6d36-4b2f-ac7b-f29867937c53","ChannelMessage.Edit","Edit user's channel messages","Allows an app to edit channel messages in Microsoft Teams, on behalf of the signed-in user."
"767156cb-16ae-4d10-8f8b-41b657c8c8c8","ChannelMessage.Read.All","Read user channel messages","Allows an app to read a channel's messages in Microsoft Teams, on behalf of the signed-in user."
"5922d31f-46c8-4404-9eaf-2117e390a8a4","ChannelMessage.ReadWrite","Read and write user channel messages","Allows the app to read and write channel messages, on behalf of the signed-in user. This doesn't allow the app to edit the policyViolation of a channel message."
"ebf0f66e-9fb1-49e4-a278-222f76911cf4","ChannelMessage.Send","Send channel messages","Allows an app to send channel messages in Microsoft Teams, on behalf of the signed-in user."
"233e0cf1-dd62-48bc-b65b-b38fe87fcf8e","ChannelSettings.Read.All","Read the names, descriptions, and settings of channels","Read all channel names, channel descriptions, and channel settings, on behalf of the signed-in user."
"d649fb7c-72b4-4eec-b2b4-b15acf79e378","ChannelSettings.ReadWrite.All","Read and write the names, descriptions, and settings of channels","Read and write the names, descriptions, and settings of all channels, on behalf of the signed-in user."
"38826093-1258-4dea-98f0-00003be2b8d0","Chat.Create","Create chats","Allows the app to create chats on behalf of the signed-in user."
"bb64e6fc-6b6d-4752-aea0-dd922dbba588","Chat.ManageDeletion.All","Delete and recover deleted chats","Allows the app to delete and recover deleted chats, on behalf of the signed-in user."
"f501c180-9344-439a-bca0-6cbf209fd270","Chat.Read","Read user chat messages","Allows an app to read 1 on 1 or group chats threads, on behalf of the signed-in user."
"9547fcb5-d03f-419d-9948-5928bbf71b0f","Chat.ReadBasic","Read names and members of user chat threads","Allows an app to read the members and descriptions of one-to-one and group chat threads, on behalf of the signed-in user."
"9ff7295e-131b-4d94-90e1-69fde507ac11","Chat.ReadWrite","Read and write user chat messages","Allows an app to read and write 1 on 1 or group chats threads, on behalf of the signed-in user."
"7e9a077b-3711-42b9-b7cb-5fa5f3f7fea7","Chat.ReadWrite.All","Read and write all chat messages","Allows an app to read and write all one-to-one and group chats in Microsoft Teams, without a signed-in user. Does not allow sending messages."
"c5a9e2b1-faf6-41d4-8875-d381aa549b24","ChatMember.Read","Read the members of chats","Read the members of chats, on behalf of the signed-in user."
"dea13482-7ea6-488f-8b98-eb5bbecf033d","ChatMember.ReadWrite","Add and remove members from chats","Add and remove members from chats, on behalf of the signed-in user."
"cdcdac3a-fd45-410d-83ef-554db620e5c7","ChatMessage.Read","Read user chat messages","Allows an app to read one-to-one and group chat messages, on behalf of the signed-in user."
"116b7235-7cc6-461e-b163-8e55691d839e","ChatMessage.Send","Send user chat messages","Allows an app to send one-to-one and group chat messages in Microsoft Teams, on behalf of the signed-in user."
"ad46d60e-1027-4b75-af88-7c14ccf43a19","CloudApp-Discovery.Read.All","Read discovered cloud applications data","Allows the app to read details of discovered cloud apps in the organization, on behalf of the signed in user."
"5252ec4e-fd40-4d92-8c68-89dd1d3c6110","CloudPC.Read.All","Read Cloud PCs","Allows the app to read the properties of Cloud PCs on behalf of the signed-in user."
"9d77138f-f0e2-47ba-ab33-cd246c8b79d1","CloudPC.ReadWrite.All","Read and write Cloud PCs","Allows the app to read and write the properties of Cloud PCs on behalf of the signed-in user."
"12ae2e92-14b5-47b2-babb-4e890bbedc0a","Community.Read.All","Read all Viva Engage communities","Allows the app to list Viva Engage communities, and to read their properties on behalf of the signed-in user."
"9e69467d-e0e2-402b-a926-3d796990197f","Community.ReadWrite.All","Read and write all Viva Engage communities","Allows the app to create Viva Engage communities and read all community properties on behalf of the signed-in user."
"f2143d35-9b4b-480d-951c-d083e69eeb2c","ConsentRequest.Create","Create consent requests","Allows the app to read create consent requests on behalf of the signed-in user."
"5942b2f6-5a7b-40af-aa37-4b6ea5447506","ConsentRequest.Read","Read consent requests created by the user","Allows the app to read consent requests and approvals created by the signed-in user, on behalf of the signed-in user."
"f3bfad56-966e-4590-a536-82ecf548ac1e","ConsentRequest.Read.All","Read consent requests","Allows the app to read consent requests and approvals on behalf of the signed-in user."
"e694a3a1-7878-46d8-8c29-3d195f6589f4","ConsentRequest.ReadApprove.All","Read and approve consent requests","Allows the app to read and approve consent requests on behalf of the signed in user."
"497d9dfa-3bd1-481a-baab-90895e54568c","ConsentRequest.ReadWrite.All","Read and write consent requests","Allows the app to read app consent requests and approvals, and deny or approve those requests on behalf of the signed-in user."
"ff74d97f-43af-4b68-9f2a-b77ee6968c5d","Contacts.Read","Read user contacts ","Allows the app to read user contacts.  "
"242b9d9e-ed24-4d09-9a52-f43769beb9d4","Contacts.Read.Shared","Read user and shared contacts","Allows the app to read contacts a user has permissions to access, including their own and shared contacts."
"d56682ec-c09e-4743-aaf4-1a3aac4caa21","Contacts.ReadWrite","Have full access to user contacts ","Allows the app to create, read, update, and delete user contacts. "
"afb6c84b-06be-49af-80bb-8f3f77004eab","Contacts.ReadWrite.Shared","Read and write user and shared contacts","Allows the app to create, read, update, and delete contacts a user has permissions to, including their own and shared contacts."
"b85f44c8-673a-4b31-a0c1-3070d0ae487e","CrossTenantContentMigration.Read.All","Read all cross tenant content migration job details","Allows the app to read your tenant's all cross tenant content migration job details on behalf of the signed-in user."
"0569b6eb-c9e3-4dc6-a998-6df963be6689","CrossTenantContentMigration.ReadWrite.All","Read and write all cross tenant content migration job details","Allows the app to read and write your tenant's all cross tenant content migration job details on behalf of the signed-in user."
"81594d25-e88e-49cf-ac8c-fecbff49f994","CrossTenantInformation.ReadBasic.All","Read cross-tenant basic information","Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem on behalf of the signed-in user."
"cb1ba48f-d22b-4325-a07f-74135a62ee41","CrossTenantUserProfileSharing.Read","Read shared cross-tenant user profile and export data","Allows the application to list and query user profile information associated with the current tenant on behalf of the signed-in user.  It also permits the application to export external user data (e.g. customer content or system-generated logs), associated with the current tenant on behalf of the signed-in user."
"759dcd16-3c90-463c-937e-abf89f991c18","CrossTenantUserProfileSharing.Read.All","Read all shared cross-tenant user profiles and export their data","Allows the application to list and query any shared user profile information associated with the current tenant on behalf of the signed-in user.  It also permits the application to export external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on behalf of the signed-in user."
"eed0129d-dc60-4f30-8641-daf337a39ffd","CrossTenantUserProfileSharing.ReadWrite","Read shared cross-tenant user profile and export or delete data","Allows the application to list and query user profile information associated with the current tenant on behalf of the signed-in user.  It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), associated with the current tenant on behalf of the signed-in user."
"64dfa325-cbf8-48e3-938d-51224a0cac01","CrossTenantUserProfileSharing.ReadWrite.All","Read all shared cross-tenant user profiles and export or delete their data","Allows the application to list and query any shared user profile information associated with the current tenant on behalf of the signed-in user.  It also permits the application to export and remove external user data (e.g. customer content or system-generated logs), for any user associated with the current tenant on behalf of the signed-in user."
"b2052569-c98c-4f36-a5fb-43e5c111e6d0","CustomAuthenticationExtension.Read.All","Read your oganization's custom authentication extensions","Allows the app to read your organization's custom authentication extensions on behalf of the signed-in user."
"8dfcf82f-15d0-43b3-bc78-a958a13a5792","CustomAuthenticationExtension.ReadWrite.All","Read and write your organization's custom authentication extensions","Allows the app to read or write your organization's custom authentication extensions on behalf of the signed-in user."
"b13ff42e-f321-4d7d-a462-141c46a1b832","CustomDetection.Read.All","Read custom detection rules","Allows the app to read custom detection rules on behalf of the signed-in user."
"c34088fb-0649-4714-af0b-bcbfec155897","CustomDetection.ReadWrite.All","Read and write custom detection rules","Allows the app to read and write custom detection rules on behalf of the signed-in user."
"b46ffa80-fe3d-4822-9a1a-c200932d54d0","CustomSecAttributeAssignment.Read.All","Read custom security attribute assignments","Allows the app to read custom security attribute assignments for all principals in the tenant on behalf of a signed in user."
"ca46335e-8453-47cd-a001-8459884efeae","CustomSecAttributeAssignment.ReadWrite.All","Read and write custom security attribute assignments","Allows the app to read and write custom security attribute assignments for all principals in the tenant on behalf of a signed in user."
"1fcdeaab-b519-44dd-bffc-ed1fd15a24e0","CustomSecAttributeAuditLogs.Read.All","Read custom security attribute audit logs","Allows the app to read audit logs for events that contain information about custom security attributes, on behalf of the signed-in user."
"ce026878-a0ff-4745-a728-d4fedd086c07","CustomSecAttributeDefinition.Read.All","Read custom security attribute definitions","Allows the app to read custom security attribute definitions for the tenant on behalf of a signed in user."
"8b0160d4-5743-482b-bb27-efc0a485ca4a","CustomSecAttributeDefinition.ReadWrite.All","Read and write custom security attribute definitions","Allows the app to read and write custom security attribute definitions for the tenant on behalf of a signed in user."
"de6ea87d-10bd-467c-8682-d525a0c61b89","CustomTags.Read.All","Read all custom tags data","Read custom tags data on behalf of the signed-in user"
"2f1bbe0a-f34b-4efb-9edb-8db8dcb50eca","CustomTags.ReadWrite.All","Read and write custom tags data","Read and write custom tags data on behalf of the signed-in user"
"0c0064ea-477b-4130-82a5-4c2cc4ff68aa","DelegatedAdminRelationship.Read.All","Read Delegated Admin relationships with customers","Allows the app to read details of delegated admin relationships with customers like access details (that includes roles) and the duration as well as specific role assignments to security groups on behalf of the signed-in user."
"885f682f-a990-4bad-a642-36736a74b0c7","DelegatedAdminRelationship.ReadWrite.All","Manage Delegated Admin relationships with customers","Allows the app to manage (create-update-terminate) Delegated Admin relationships with customers as well as role assignments to security groups for active Delegated Admin relationships on behalf of the signed-in user."
"a197cdc4-a8e8-4d49-9d35-4ca7c83887b4","DelegatedPermissionGrant.Read.All","Read delegated permission grants","Allows the app to read delegated permission grants, on behalf of the signed in user."
"41ce6ca6-6826-4807-84f1-1c82854f7ee5","DelegatedPermissionGrant.ReadWrite.All","Manage all delegated permission grants","Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), on behalf of the signed in user."
"bac3b9c2-b516-4ef4-bd3b-c2ef73d8d804","Device.Command","Communicate with user devices","Allows the app to launch another app or communicate with another app on a user's device on behalf of the signed-in user."
"11d4cd79-5ba5-460f-803f-e22c8ab85ccd","Device.Read","Read user devices","Allows the app to read a user's list of devices on behalf of the signed-in user."
"951183d1-1a61-466f-a6d1-1fde911bfd95","Device.Read.All","Read all devices","Allows the app to read your organization's devices' configuration information on behalf of the signed-in user."
"280b3b69-0437-44b1-bc20-3b2fca1ee3e9","DeviceLocalCredential.Read.All","Read device local credential passwords","Allows the app to read device local credential properties including passwords, on behalf of the signed-in user."
"9917900e-410b-4d15-846e-42a357488545","DeviceLocalCredential.ReadBasic.All","Read device local credential properties","Allows the app to read device local credential properties excluding passwords, on behalf of the signed-in user."
"4edf5f54-4666-44af-9de9-0144fb4b6e8c","DeviceManagementApps.Read.All","Read Microsoft Intune apps","Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune."
"7b3f05d5-f68c-4b8d-8c59-a2ecd12f24af","DeviceManagementApps.ReadWrite.All","Read and write Microsoft Intune apps","Allows the app to read and write the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune."
"f1493658-876a-4c87-8fa7-edb559b3476a","DeviceManagementConfiguration.Read.All","Read Microsoft Intune Device Configuration and Policies","Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups."
"0883f392-0a7a-443d-8c76-16a6d39c7b63","DeviceManagementConfiguration.ReadWrite.All","Read and write Microsoft Intune Device Configuration and Policies","Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups."
"3404d2bf-2b13-457e-a330-c24615765193","DeviceManagementManagedDevices.PrivilegedOperations.All","Perform user-impacting remote actions on Microsoft Intune devices","Allows the app to perform remote high impact actions such as wiping the device or resetting the passcode on devices managed by Microsoft Intune."
"314874da-47d6-4978-88dc-cf0d37f0bb82","DeviceManagementManagedDevices.Read.All","Read Microsoft Intune devices","Allows the app to read the properties of devices managed by Microsoft Intune."
"44642bfe-8385-4adc-8fc6-fe3cb2c375c3","DeviceManagementManagedDevices.ReadWrite.All","Read and write Microsoft Intune devices","Allows the app to read and write the properties of devices managed by Microsoft Intune. Does not allow high impact operations such as remote wipe and password reset on the device’s owner."
"49f0cc30-024c-4dfd-ab3e-82e137ee5431","DeviceManagementRBAC.Read.All","Read Microsoft Intune RBAC settings","Allows the app to read the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings."
"0c5e8a55-87a6-4556-93ab-adc52c4d862d","DeviceManagementRBAC.ReadWrite.All","Read and write Microsoft Intune RBAC settings","Allows the app to read and write the properties relating to the Microsoft Intune Role-Based Access Control (RBAC) settings."
"8696daa5-bce5-4b2e-83f9-51b6defc4e1e","DeviceManagementServiceConfig.Read.All","Read Microsoft Intune configuration","Allows the app to read Microsoft Intune service properties including device enrollment and third party service connection configuration."
"662ed50a-ac44-4eef-ad86-62eed9be2a29","DeviceManagementServiceConfig.ReadWrite.All","Read and write Microsoft Intune configuration","Allows the app to read and write Microsoft Intune service properties including device enrollment and third party service connection configuration."
"0e263e50-5827-48a4-b97c-d940288653c7","Directory.AccessAsUser.All","Access directory as the signed in user","Allows the app to have the same access to information in the directory as the signed-in user."
"06da0dbc-49e2-44d2-8312-53f166ab848a","Directory.Read.All","Read directory data","Allows the app to read data in your organization's directory, such as users, groups and apps."
"c5366453-9fb0-48a5-a156-24f0c49a4b84","Directory.ReadWrite.All","Read and write directory data","Allows the app to read and write data in your organization's directory, such as users, and groups.  It does not allow the app to delete users or groups, or reset user passwords."
"cba5390f-ed6a-4b7f-b657-0efc2210ed20","Directory.Write.Restricted","Manage restricted resources in the directory","Allows the app to manage restricted resources based on the other permissions granted to the app, on behalf of the signed-in user."
"34d3bd24-f6a6-468c-b67c-0c365c1d6410","DirectoryRecommendations.Read.All","Read Azure AD recommendations","Allows the app to read Azure AD recommendations, on behalf of the signed-in user."
"f37235e8-90a0-4189-93e2-e55b53867ccd","DirectoryRecommendations.ReadWrite.All","Read and update Azure AD recommendations","Allows the app to read and update Azure AD recommendations, on behalf of the signed-in user. "
"2f9ee017-59c1-4f1d-9472-bd5529a7b311","Domain.Read.All","Read domains.","Allows the app to read all domain properties on behalf of the signed-in user."
"0b5d694c-a244-4bde-86e6-eb5cd07730fe","Domain.ReadWrite.All","Read and write domains","Allows the app to read and write all domain properties on behalf of the signed-in user. Also allows the app to add, verify and remove domains."
"ff91d191-45a0-43fd-b837-bd682c4a0b0f","EAS.AccessAsUser.All","Access mailboxes via Exchange ActiveSync","Allows the app to have the same access to mailboxes as the signed-in user via Exchange ActiveSync."
"99201db3-7652-4d5a-809a-bdb94f85fe3c","eDiscovery.Read.All","Read all eDiscovery objects","Allows the app to read eDiscovery objects such as cases, custodians, review sets and other related objects on behalf of the signed-in user."
"acb8f680-0834-4146-b69e-4ab1b39745ad","eDiscovery.ReadWrite.All","Read and write all eDiscovery objects","Allows the app to read and write eDiscovery objects such as cases, custodians, review sets and other related objects on behalf of the signed-in user."
"8523895c-6081-45bf-8a5d-f062a2f12c9f","EduAdministration.Read","Read education app settings","Read the state and settings of all Microsoft education apps on behalf of the user."
"63589852-04e3-46b4-bae9-15d5b1050748","EduAdministration.ReadWrite","Manage education app settings","Manage the state and settings of all Microsoft education apps on behalf of the user."
"091460c9-9c4a-49b2-81ef-1f3d852acce2","EduAssignments.Read","Read users' class assignments and their grades","Allows the app to read assignments and their grades on behalf of the user."
"c0b0103b-c053-4b2e-9973-9f3a544ec9b8","EduAssignments.ReadBasic","Read users' class assignments without grades","Allows the app to read assignments without grades on behalf of the user."
"2f233e90-164b-4501-8bce-31af2559a2d3","EduAssignments.ReadWrite","Read and write users' class assignments and their grades","Allows the app to read and write assignments and their grades on behalf of the user."
"2ef770a1-622a-47c4-93ee-28d6adbed3a0","EduAssignments.ReadWriteBasic","Read and write users' class assignments without grades","Allows the app to read and write assignments without grades on behalf of the user."
"484859e8-b9e2-4e92-b910-84db35dadd29","EduCurricula.Read","Read the user's class modules and resources","Allows the app to read the user's modules and resources on behalf of the signed-in user."
"4793c53b-df34-44fd-8d26-d15c517732f5","EduCurricula.ReadWrite","Read and write the user's class modules and resources","Allows the app to read and write user's modules and resources on behalf of the signed-in user."
"a4389601-22d9-4096-ac18-36a927199112","EduRoster.Read","Read users' view of the roster","Allows the app to read the structure of schools and classes in an organization's roster and education-specific information about users to be read on behalf of the user."
"5d186531-d1bf-4f07-8cea-7c42119e1bd9","EduRoster.ReadBasic","Read a limited subset of users' view of the roster","Allows the app to read a limited subset of the properties from the structure of schools and classes in an organization's roster and a limited subset of properties about users to be read on behalf of the user. Includes name, status, education role, email address and photo."
"359e19a6-e3fa-4d7f-bcab-d28ec592b51e","EduRoster.ReadWrite","Read and write users' view of the roster","Allows the app to read and write the structure of schools and classes in an organization's roster and education-specific information about users to be read and written on behalf of the user."
"64a6cdd6-aab1-4aaf-94b8-3cc8405e90d0","email","View users' email address","Allows the app to read your users' primary email address"
"5449aa12-1393-4ea2-a7c7-d0e06c1a56b2","EntitlementManagement.Read.All","Read all entitlement management resources","Allows the app to read access packages and related entitlement management resources on behalf of the signed-in user."
"ae7a573d-81d7-432b-ad44-4ed5c9d89038","EntitlementManagement.ReadWrite.All","Read and write entitlement management resources","Allows the app to request access to and management of access packages and related entitlement management resources on behalf of the signed-in user."
"e9fdcbbb-8807-410f-b9ec-8d5468c7c2ac","EntitlementMgmt-SubjectAccess.ReadWrite","Read and write entitlement management resources related to self-service operations","Allows the app to manage self-service entitlement management resources on behalf of the signed-in user.  This includes operations such as requesting access and approving access of others."
"f7dd3bed-5eec-48da-bc73-1c0ef50bc9a1","EventListener.Read.All","Read your organization's authentication event listeners","Allows the app to read your organization's authentication event listeners on behalf of the signed-in user."
"d11625a6-fe21-4fc6-8d3d-063eba5525ad","EventListener.ReadWrite.All","Read and write your organization's authentication event listeners","Allows the app to read or write your organization's authentication event listeners on behalf of the signed-in user."
"9769c687-087d-48ac-9cb3-c37dde652038","EWS.AccessAsUser.All","Access mailboxes as the signed-in user via Exchange Web Services","Allows the app to have the same access to mailboxes as the signed-in user via Exchange Web Services."
"a38267a5-26b6-4d76-9493-935b7599116b","ExternalConnection.Read.All","Read all external connections","Allows the app to read all external connections on behalf of a signed-in user. The signed-in user must be an administrator."
"bbbbd9b3-3566-4931-ac37-2b2180d9e334","ExternalConnection.ReadWrite.All","Read and write all external connections","Allows the app to read and write all external connections on behalf of a signed-in user. The signed-in user must be an administrator."
"4082ad95-c812-4f02-be92-780c4c4f1830","ExternalConnection.ReadWrite.OwnedBy","Read and write external connections","Allows the app to read and write settings of external connections on behalf of a signed-in user. The signed-in user must be an administrator. The app can only read and write settings of connections that it is authorized to."
"922f9392-b1b7-483c-a4be-0089be7704fb","ExternalItem.Read.All","Read items in external datasets","Allow the app to read external datasets and content, on behalf of the signed-in user."
"b02c54f8-eb48-4c50-a9f0-a149e5a2012f","ExternalItem.ReadWrite.All","Read and write all external items","Allows the app to read and write all external items on behalf of a signed-in user. The signed-in user must be an administrator."
"4367b9d7-cee7-4995-853c-a0bdfe95c1f9","ExternalItem.ReadWrite.OwnedBy","Read and write external items","Allows the app to read and write external items on behalf of a signed-in user. The signed-in user must be an administrator. The app can only read external items of the connection that it is authorized to."
"47167bec-55a7-4caf-9ecc-8d4566e3cfb1","ExternalUserProfile.Read.All","Read external user profiles","Allows the app to read available properties of external user profiles, on behalf of the signed-in user."
"c6068dc7-a791-46a4-a811-b8228e6649ab","ExternalUserProfile.ReadWrite.All","Read and write external user profiles","Allows the app to read and write available properties of external user profiles, on behalf of the signed-in user."
"3a1e4806-a744-4c70-80fc-223bf8582c46","Family.Read","Read your family info","Allows the app to read your family information, members and their basic profile."
"10465720-29dd-4523-a11a-6a75c743c9d9","Files.Read","Read user files","Allows the app to read the signed-in user's files."
"df85f4d6-205c-4ac5-a5ea-6bf408dba283","Files.Read.All","Read all files that user can access","Allows the app to read all files the signed-in user can access."
"5447fe39-cb82-4c1a-b977-520e67e724eb","Files.Read.Selected","Read files that the user selects (preview)","(Preview) Allows the app to read files that the user selects. The app has access for several hours after the user selects a file."
"5c28f0bf-8a70-41f1-8ab2-9032436ddb65","Files.ReadWrite","Have full access to user files","Allows the app to read, create, update and delete the signed-in user's files."
"863451e7-0667-486c-a5d6-d135439485f0","Files.ReadWrite.All","Have full access to all files user can access","Allows the app to read, create, update and delete all files the signed-in user can access."
"8019c312-3263-48e6-825e-2b833497195b","Files.ReadWrite.AppFolder","Have full access to the application's folder (preview)","(Preview) Allows the app to read, create, update and delete files in the application's folder."
"17dde5bd-8c17-420f-a486-969730c1b827","Files.ReadWrite.Selected","Read and write files that the user selects (preview)","(Preview) Allows the app to read and write files that the user selects. The app has access for several hours after the user selects a file."
"085ca537-6565-41c2-aca7-db852babc212","FileStorageContainer.Selected","Access selected file storage containers","Allows the application to utilize the file storage container platform to manage containers on behalf of the signed in user. The specific file storage containers and the permissions granted to them will be configured in Microsoft 365 by the developer of each container type."
"f534bf13-55d4-45a9-8f3c-c92fe64d6131","Financials.ReadWrite.All","Read and write financials data","Allows the app to read and write financials data on behalf of the signed-in user."
"092211d9-ca1a-427b-813e-b79c7653fe71","Goals-Export.Read.All","Read all goals and export jobs that a user can access","Allows the app to read all goals and export jobs that the signed-in user can access."
"2edeb9fd-4228-480c-a26d-2ed52011cf3d","Goals-Export.ReadWrite.All","Have full access to all goals and export jobs a user can access","Allows the app to read goals, create and read export jobs that the signed-in user can access."
"5f8c59db-677d-491f-a6b8-5f174b11ec1d","Group.Read.All","Read all groups","Allows the app to list groups, and to read their properties and all group memberships on behalf of the signed-in user.  Also allows the app to read calendar, conversations, files, and other group content for all groups the signed-in user can access. "
"4e46008b-f24c-477d-8fff-7bb4ec7aafe0","Group.ReadWrite.All","Read and write all groups","Allows the app to create groups and read all group properties and memberships on behalf of the signed-in user.  Additionally allows group owners to manage their groups and allows group members to update group content."
"bc024368-1153-4739-b217-4326f2e966d0","GroupMember.Read.All","Read group memberships","Allows the app to list groups, read basic group properties and read membership of all groups the signed-in user has access to."
"f81125ac-d3b7-4573-a3b2-7099cc39df9e","GroupMember.ReadWrite.All","Read and write group memberships","Allows the app to list groups, read basic properties, read and update the membership of the groups the signed-in user has access to. Group properties and owners cannot be updated and groups cannot be deleted."
"43781733-b5a7-4d1b-98f4-e8edff23e1a9","IdentityProvider.Read.All","Read identity providers","Allows the app to read your organization’s identity (authentication) providers’ properties on behalf of the user."
"f13ce604-1677-429f-90bd-8a10b9f01325","IdentityProvider.ReadWrite.All","Read and write identity providers","Allows the app to read and write your organization’s identity (authentication) providers’ properties on behalf of the user."
"8f6a01e7-0391-4ee5-aa22-a3af122cef27","IdentityRiskEvent.Read.All","Read identity risk event information","Allows the app to read identity risk event information for all users in your organization on behalf of the signed-in user. "
"9e4862a5-b68f-479e-848a-4e07e25c9916","IdentityRiskEvent.ReadWrite.All","Read and write risk event information","Allows the app to read and update identity risk event information for all users in your organization on behalf of the signed-in user. Update operations include confirming risk event detections. "
"ea5c4ab0-5a73-4f35-8272-5d5337884e5d","IdentityRiskyServicePrincipal.Read.All","Read all identity risky service principal information","Allows the app to read all identity risky service principal information for your organization, on behalf of the signed-in user."
"bb6f654c-d7fd-4ae3-85c3-fc380934f515","IdentityRiskyServicePrincipal.ReadWrite.All","Read and write all identity risky service principal information","Allows the app to read and update identity risky service principal information for all service principals in your organization, on behalf of the signed-in user. Update operations include dismissing risky service principals."
"d04bb851-cb7c-4146-97c7-ca3e71baf56c","IdentityRiskyUser.Read.All","Read identity risky user information","Allows the app to read identity risky user information for all users in your organization on behalf of the signed-in user."
"e0a7cdbb-08b0-4697-8264-0069786e9674","IdentityRiskyUser.ReadWrite.All","Read and write risky user information","Allows the app to read and update identity risky user information for all users in your organization on behalf of the signed-in user. Update operations include dismissing risky users."
"2903d63d-4611-4d43-99ce-a33f3f52e343","IdentityUserFlow.Read.All","Read all identity user flows","Allows the app to read your organization's user flows, on behalf of the signed-in user."
"281892cc-4dbf-4e3a-b6cc-b21029bb4e82","IdentityUserFlow.ReadWrite.All","Read and write all identity user flows","Allows the app to read or write your organization's user flows, on behalf of the signed-in user."
"652390e4-393a-48de-9484-05f9b1212954","IMAP.AccessAsUser.All","Read and write access to mailboxes via IMAP.","Allows the app to have the same access to mailboxes as the signed-in user via IMAP protocol."
"d19c0de5-7ecb-4aba-b090-da35ebcd5425","IndustryData-DataConnector.Read.All","View data connector definitions","Allows the app to read data connectors on behalf of the signed-in user."
"5ce933ac-3997-4280-aed0-cc072e5c062a","IndustryData-DataConnector.ReadWrite.All","Manage data connector definitions","Allows the app to read and write data connectors on behalf of the signed-in user."
"fc47391d-ab2c-410f-9059-5600f7af660d","IndustryData-DataConnector.Upload","Upload files to a data connector","Allows the app to upload data files to a data connector on behalf of the signed-in user."
"cb0774da-a605-42af-959c-32f438fb38f4","IndustryData-InboundFlow.Read.All","View inbound flow definitions","Allows the app to read inbound data flows on behalf of the signed-in user."
"97044676-2cec-40ee-bd70-38df444c9e70","IndustryData-InboundFlow.ReadWrite.All","Manage inbound flow definitions","Allows the app to read and write inbound data flows on behalf of the signed-in user."
"4741a003-8952-4be4-9217-33a0ac327122","IndustryData-OutboundFlow.Read.All","View outbound flow definitions","Allows the app to read outbound data flows on behalf of the signed-in user."
"aeb68e0b-e562-4a1f-b6dd-3484ad0cbb4b","IndustryData-OutboundFlow.ReadWrite.All","Manage outbound flow definitions","Allows the app to read and write outbound data flows on behalf of the signed-in user."
"a3f96ffe-cb84-40a8-ac85-582d7ef97c2a","IndustryData-ReferenceDefinition.Read.All","View reference definitions","Allows the app to read reference definitions on behalf of the signed-in user."
"92685235-50c4-4702-b2c8-36043db6fa79","IndustryData-Run.Read.All","View current and previous runs","Allows the app to read current and previous IndustryData runs on behalf of the signed-in user."
"49b7016c-89ae-41e7-bd6f-b7170c5490bf","IndustryData-SourceSystem.Read.All","View source system definitions","Allows the app to read source system definitions on behalf of the signed-in user."
"9599f005-05d6-4ea7-b1b1-4929768af5d0","IndustryData-SourceSystem.ReadWrite.All","Manage source system definitions","Allows the app to read and write source system definitions on behalf of the signed-in user."
"c9d51f28-8ccd-42b2-a836-fd8fe9ebf2ae","IndustryData-TimePeriod.Read.All","Read time period definitions","Allows the app to read time period definitions on behalf of the signed-in user."
"b6d56528-3032-4f9d-830f-5a24a25e6661","IndustryData-TimePeriod.ReadWrite.All","Manage time period definitions","Allows the app to read and write time period definitions on behalf of the signed-in user."
"60382b96-1f5e-46ea-a544-0407e489e588","IndustryData.ReadBasic.All","Read basic Industry Data service and resource definitions","Allows the app to read basic Industry Data service and resource information on behalf of the signed-in user."
"12f4bffb-b598-413c-984b-db99728f8b54","InformationProtectionConfig.Read","Read configurations for protecting organizational data applicable to the user","Allows the app to read the configurations applicable to the signed-in user for protecting organizational data, on behalf of the signed-in user."
"4ad84827-5578-4e18-ad7a-86530b12f884","InformationProtectionPolicy.Read","Read user sensitivity labels and label policies.","Allows an app to read information protection sensitivity labels and label policy settings, on behalf of the signed-in user."
"7d249730-51a3-4180-8ec1-214f144f1bff","Insights-UserMetric.Read.All","Read user metrics insights","Allows an app to read user metrics insights, such as daily and monthly active users, on behalf of the signed-in user."
"ac08cdae-e845-41db-adf9-5899a0ec9ef6","LearningAssignedCourse.Read","Read user's assignments","Allows the app to read data for the learner's assignments in the organization's directory, on behalf of the signed-in user."
"ea4c1fd9-6a9f-4432-8e5d-86e06cc0da77","LearningContent.Read.All","Read learning content","Allows the app to read learning content in the organization's directory, on behalf of the signed-in user."
"53cec1c4-a65f-4981-9dc1-ad75dbf1c077","LearningContent.ReadWrite.All","Manage learning content","Allows the app to manage learning content in the organization's directory, on behalf of the signed-in user."
"dd8ce36f-9245-45ea-a99e-8ac398c22861","LearningProvider.Read","Read learning provider","Allows the app to read data for the learning provider in the organization's directory, on behalf of the signed-in user."
"40c2eb57-abaf-49f5-9331-e90fd01f7130","LearningProvider.ReadWrite","Manage learning provider","Allows the app to create, update, read, and delete data for the learning provider in the organization's directory, on behalf of the signed-in user."
"f6403ef7-4a96-47be-a190-69ba274c3f11","LearningSelfInitiatedCourse.Read","Read user's self-initiated courses","Allows the app to read data for the learner's self-initiated courses in the organization's directory, on behalf of the signed-in user."
"f55016cc-149c-447e-8f21-7cf3ec1d6350","LicenseAssignment.ReadWrite.All","Manage all license assignments","Allows an app to manage license assignments for users and groups, on behalf of the signed-in user."
"9bcb9916-765a-42af-bf77-02282e26b01a","LifecycleWorkflows.Read.All","Read all lifecycle workflows resources","Allows the app to list and read all workflows, tasks and related lifecycle workflows resources on behalf of the signed-in user."
"84b9d731-7db8-4454-8c90-fd9e95350179","LifecycleWorkflows.ReadWrite.All","Read and write all lifecycle workflows resources","Allows the app to create, update, list, read and delete all workflows, tasks and related lifecycle workflows resources on behalf of the signed-in user."
"570282fd-fa5c-430d-a7fd-fc8dc98a9dca","Mail.Read","Read user mail ","Allows the app to read the signed-in user's mailbox."
"7b9103a5-4610-446b-9670-80643382c1fa","Mail.Read.Shared","Read user and shared mail","Allows the app to read mail a user can access, including their own and shared mail."
"a4b8392a-d8d1-4954-a029-8e668a39a170","Mail.ReadBasic","Read user basic mail","Allows the app to read email in the signed-in user's mailbox except body, previewBody, attachments and any extended properties."
"b11fa0e7-fdb7-4dc9-b1f1-59facd463480","Mail.ReadBasic.Shared","Read user and shared basic mail","Allows the app to read mail the signed-in user can access, including their own and shared mail, except for body, bodyPreview, uniqueBody, attachments, extensions, and any extended properties."
"024d486e-b451-40bb-833d-3e66d98c5c73","Mail.ReadWrite","Read and write access to user mail ","Allows the app to create, read, update, and delete email in user mailboxes. Does not include permission to send mail. "
"5df07973-7d5d-46ed-9847-1271055cbd51","Mail.ReadWrite.Shared","Read and write user and shared mail","Allows the app to create, read, update, and delete mail a user has permission to access, including their own and shared mail. Does not include permission to send mail."
"e383f46e-2787-4529-855e-0e479a3ffac0","Mail.Send","Send mail as a user ","Allows the app to send mail as users in the organization. "
"a367ab51-6b49-43bf-a716-a1fb06d2a174","Mail.Send.Shared","Send mail on behalf of others","Allows the app to send mail as the signed-in user, including sending on-behalf of others."
"87f447af-9fa4-4c32-9dfa-4a57a73d18ce","MailboxSettings.Read","Read user mailbox settings","Allows the app to the read user's mailbox settings. Does not include permission to send mail."
"818c620a-27a9-40bd-a6a5-d96f7d610b4b","MailboxSettings.ReadWrite","Read and write user mailbox settings","Allows the app to create, read, update, and delete user's mailbox settings. Does not include permission to send mail."
"dc34164e-6c4a-41a0-be89-3ae2fbad7cd3","ManagedTenants.Read.All","Read all managed tenant information","Allows the app to read all managed tenant information on behalf of the signed-in user."
"b31fa710-c9b3-4d9e-8f5e-8036eecddab9","ManagedTenants.ReadWrite.All","Read and write all managed tenant information","Allows the app to read and write all managed tenant information on behalf of the signed-in user."
"f6a3db3e-f7e8-4ed2-a414-557c8c9830be","Member.Read.Hidden","Read hidden memberships","Allows the app to read the memberships of hidden groups and administrative units on behalf of the signed-in user, for those hidden groups and administrative units that the signed-in user has access to."
"526aa72a-5878-49fe-bf4e-357973af9b06","MultiTenantOrganization.Read.All","Read multi-tenant organization details and tenants","Allows the app to read multi-tenant organization details and tenants on behalf of the signed-in user."
"225db56b-15b2-4daa-acb3-0eec2bbe4849","MultiTenantOrganization.ReadBasic.All","Read multi-tenant organization basic details and active tenants","Allows the app to read multi-tenant organization basic details and active tenants on behalf of the signed-in user."
"77af1528-84f3-4023-8d90-d219cd433108","MultiTenantOrganization.ReadWrite.All","Read and write multi-tenant organization details and tenants","Allows the app to read and write multi-tenant organization details and tenants on behalf of the signed-in user."
"b0c61509-cfc3-42bd-9bd4-66d81785fee4","NetworkAccess-Reports.Read.All","Read all network access reports","Allows the app to read all network access reports on behalf of the signed-in user."
"2f7013e0-ab4e-447f-a5e1-5d419950692d","NetworkAccess.Read.All","Read all network access information","Allows the app to read all network access information on behalf of the signed-in user."
"ae2df9c5-f18d-4ec4-a51b-bdeb807f177b","NetworkAccess.ReadWrite.All","Read and write all network access information","Allows the app to read and write all network access information and configuration settings on behalf of the signed-in user."
"4051c7fc-b429-4804-8d80-8f1f8c24a6f7","NetworkAccessBranch.Read.All","Read properties of branches for network access","Allows the app to read your organization's branches for network access on behalf of the signed-in user."
"b8a36cc2-b810-461a-baa4-a7281e50bd5c","NetworkAccessBranch.ReadWrite.All","Read and write properties of branches for network access","Allows the app to read and write your organization's branches for network access on behalf of the signed-in user."
"ba22922b-752c-446f-89d7-a2d92398fceb","NetworkAccessPolicy.Read.All","Read security and routing policies for network access","Allows the app to read your organization's security and routing network access policies on behalf of the signed-in user."
"b1fbad0f-ef6e-42ed-8676-bca7fa3e7291","NetworkAccessPolicy.ReadWrite.All","Read and write security and routing policies for network access","Allows the app to read and write your organization's security and routing network access policies on behalf of the signed-in user."
"9d822255-d64d-4b7a-afdb-833b9a97ed02","Notes.Create","Create user OneNote notebooks","Allows the app to read the titles of OneNote notebooks and sections and to create new pages, notebooks, and sections on behalf of the signed-in user."
"371361e4-b9e2-4a3f-8315-2a301a3b0a3d","Notes.Read","Read user OneNote notebooks","Allows the app to read OneNote notebooks on behalf of the signed-in user."
"dfabfca6-ee36-4db2-8208-7a28381419b3","Notes.Read.All","Read all OneNote notebooks that user can access","Allows the app to read OneNote notebooks that the signed-in user has access to in the organization."
"615e26af-c38a-4150-ae3e-c3b0d4cb1d6a","Notes.ReadWrite","Read and write user OneNote notebooks","Allows the app to read, share, and modify OneNote notebooks on behalf of the signed-in user."
"64ac0503-b4fa-45d9-b544-71a463f05da0","Notes.ReadWrite.All","Read and write all OneNote notebooks that user can access","Allows the app to read, share, and modify OneNote notebooks that the signed-in user has access to in the organization."
"ed68249d-017c-4df5-9113-e684c7f8760b","Notes.ReadWrite.CreatedByApp","Limited notebook access (deprecated)","This is deprecated!  Do not use! This permission no longer has any effect. You can safely consent to it. No additional privileges will be granted to the app."
"89497502-6e42-46a2-8cb2-427fd3df970a","Notifications.ReadWrite.CreatedByApp","Deliver and manage user notifications for this app","Allows the app to deliver its notifications on behalf of signed-in users. Also allows the app to read, update, and delete the user's notification items for this app."
"7427e0e9-2fba-42fe-b0c0-848c9e6a8182","offline_access","Maintain access to data you have given it access to","Allows the app to see and update the data you gave it access to, even when users are not currently using the app. This does not give the app any additional permissions."
"110e5abb-a10c-4b59-8b55-9b4daa4ef743","OnlineMeetingArtifact.Read.All","Read user's online meeting artifacts","Allows the app to read online meeting artifacts on behalf of the signed-in user."
"190c2bb6-1fdd-4fec-9aa2-7d571b5e1fe3","OnlineMeetingRecording.Read.All","Read all recordings of online meetings.","Allows the app to read all recordings of online meetings, on behalf of the signed-in user."
"9be106e1-f4e3-4df5-bdff-e4bc531cbe43","OnlineMeetings.Read","Read user's online meetings","Allows the app to read online meeting details on behalf of the signed-in user."
"a65f2972-a4f8-4f5e-afd7-69ccb046d5dc","OnlineMeetings.ReadWrite","Read and create user's online meetings","Allows the app to read and create online meetings on behalf of the signed-in user."
"30b87d18-ebb1-45db-97f8-82ccb1f0190c","OnlineMeetingTranscript.Read.All","Read all transcripts of online meetings. ","Allows the app to read all transcripts of online meetings, on behalf of the signed-in user."
"f6609722-4100-44eb-b747-e6ca0536989d","OnPremDirectorySynchronization.Read.All","Read all on-premises directory synchronization information","Allows the app to read all on-premises directory synchronization information for the organization, on behalf of the signed-in user."
"c2d95988-7604-4ba1-aaed-38a5f82a51c7","OnPremDirectorySynchronization.ReadWrite.All","Read and write all on-premises directory synchronization information","Allows the app to read and write all on-premises directory synchronization information for the organization, on behalf of the signed-in user."
"8c4d5184-71c2-4bf8-bb9d-bc3378c9ad42","OnPremisesPublishingProfiles.ReadWrite.All","Manage on-premises published resources","Allows the app to manage hybrid identity service configuration by creating, viewing, updating and deleting on-premises published resources, on-premises agents and agent groups, on behalf of the signed-in user."
"37f7f235-527c-4136-accd-4a02d197296e","openid","Sign users in","Allows users to sign in to the app with their work or school accounts and allows the app to see basic user profile information."
"4908d5b9-3fb2-4b1e-9336-1888b7937185","Organization.Read.All","Read organization information","Allows the app to read the organization and related resources, on behalf of the signed-in user. Related resources include things like subscribed skus and tenant branding information."
"46ca0847-7e6b-426e-9775-ea810a948356","Organization.ReadWrite.All","Read and write organization information","Allows the app to read and write the organization and related resources, on behalf of the signed-in user. Related resources include things like subscribed skus and tenant branding information."
"9082f138-6f02-4f3a-9f4d-5f3c2ce5c688","OrganizationalBranding.Read.All","Read organizational branding information","Allows the app to read the organizational branding information, on behalf of the signed-in user."
"15ce63de-b141-4c9a-a9a5-241bf27c6aaf","OrganizationalBranding.ReadWrite.All","Read and write organizational branding information","Allows the app to read and write the organizational branding information, on behalf of the signed-in user."
"08432d1b-5911-483c-86df-7980af5cdee0","OrgContact.Read.All","Read organizational contacts","Allows the app to read all organizational contacts on behalf of the signed-in user.  These contacts are managed by the organization and are different from a user's personal contacts."
"1e9b7a7e-4d64-44ff-acf5-2e9651c1519f","OrgSettings-AppsAndServices.Read.All","Read organization-wide apps and services settings","Allows the app to read organization-wide apps and services settings on behalf of the signed-in user."
"c167b0e7-47c0-48e8-9eee-9892f58018fa","OrgSettings-AppsAndServices.ReadWrite.All","Read and write organization-wide apps and services settings","Allows the app to read and write organization-wide apps and services settings on behalf of the signed-in user."
"9862d930-5aec-4a98-8d4f-7277a8db9bcb","OrgSettings-DynamicsVoice.Read.All","Read organization-wide Dynamics customer voice settings","Allows the app to read organization-wide Dynamics customer voice settings on behalf of the signed-in user."
"4cea26fb-6967-4234-82c4-c044414743f8","OrgSettings-DynamicsVoice.ReadWrite.All","Read and write organization-wide Dynamics customer voice settings","Allows the app to read and write organization-wide Dynamics customer voice settings on behalf of the signed-in user."
"210051a0-1ffc-435c-ae76-02d226d05752","OrgSettings-Forms.Read.All","Read organization-wide Microsoft Forms settings","Allows the app to read organization-wide Microsoft Forms settings on behalf of the signed-in user."
"346c19ff-3fb2-4e81-87a0-bac9e33990c1","OrgSettings-Forms.ReadWrite.All","Read and write organization-wide Microsoft Forms settings","Allows the app to read and write organization-wide Microsoft Forms settings on behalf of the signed-in user."
"8cbdb9f6-9c2e-451a-814d-ec606e5d0212","OrgSettings-Microsoft365Install.Read.All","Read organization-wide Microsoft 365 apps installation settings","Allows the app to read organization-wide Microsoft 365 apps installation settings on behalf of the signed-in user."
"1ff35e91-19eb-42d8-aa2d-cc9891127ae5","OrgSettings-Microsoft365Install.ReadWrite.All","Read and write organization-wide Microsoft 365 apps installation settings","Allows the app to read and write organization-wide Microsoft 365 apps installation settings on behalf of the signed-in user."
"7ff96f41-f022-45ba-acd8-ef3f03063d6b","OrgSettings-Todo.Read.All","Read organization-wide Microsoft To Do settings","Allows the app to read organization-wide Microsoft To Do settings on behalf of the signed-in user."
"087502c2-5263-433e-abe3-8f77231a0627","OrgSettings-Todo.ReadWrite.All","Read and write organization-wide Microsoft To Do settings","Allows the app to read and write organization-wide Microsoft To Do settings on behalf of the signed-in user."
"8804798e-5934-4e30-8ce3-ef88257cecd4","PartnerBilling.Read.All","Read all billing data for your company's tenant","Allows the app to read all of billing data from Microsoft for your company's tenant, on behalf of the signed-in user. This includes reading billed and unbilled Usage and Invoice reconciliation data."
"5567b981-0bf1-4796-9038-0648b46e116d","PartnerSecurity.Read.All","Read security alerts of customer with CSP relationship","Allows the app to read security alerts of customer with CSP relationship on behalf of the partner signed-in user."
"0cd2c1f6-94a1-4075-ab8c-0b1aff2e1ad5","PartnerSecurity.ReadWrite.All","Read security alerts and update status of security alerts of customer with CSP relationship","Allows the app to read security alerts and update status of alerts of customer with CSP relationship on behalf of the partner signed-in user."
"d88fd3fb-53d3-4c1c-8c39-787fcac2ed7a","PendingExternalUserProfile.Read.All","Read pending external user profiles","Allows the app to read available properties of pending external user profiles, on behalf of the signed-in user."
"93a1fb28-c908-4826-904e-0c74ad352b73","PendingExternalUserProfile.ReadWrite.All","Read and write pending external user profiles","Allows the app to read and write available properties of pending external user profiles, on behalf of the signed-in user."
"ba47897c-39ec-4d83-8086-ee8256fa737d","People.Read","Read users' relevant people lists","Allows the app to read a ranked list of relevant people of the signed-in user. The list includes local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype)."
"b89f9189-71a5-4e70-b041-9887f0bc7e4a","People.Read.All","Read all users' relevant people lists","Allows the app to read a scored list of relevant people of the signed-in user or other users in the signed-in user's organization. The list can include local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype)."
"ec762c5f-388b-4b16-8693-ac1efbc611bc","PeopleSettings.Read.All","Read tenant-wide people settings","Allows the application to read tenant-wide people settings on behalf of the signed-in user."
"e67e6727-c080-415e-b521-e3f35d5248e9","PeopleSettings.ReadWrite.All","Read and write tenant-wide people settings","Allows the application to read and write tenant-wide people settings on behalf of the signed-in user."
"cb8f45a0-5c2e-4ea1-b803-84b870a7d7ec","Place.Read.All","Read all company places","Allows the app to read your company's places (conference rooms and room lists) for calendar events and other applications, on behalf of the signed-in user."
"4c06a06a-098a-4063-868e-5dfee3827264","Place.ReadWrite.All","Read and write organization places","Allows the app to manage organization places (conference rooms and room lists) for calendar events and other applications, on behalf of the signed-in user."
"4c7f93d2-6b0b-4e05-91aa-87842f0a2142","PlaceDevice.Read.All","Read all workplace devices","Allows the app to read all workplace devices, on behalf of the signed-in user."
"eafd6a71-e95a-4f8a-bb6e-fb84ab7fbd9e","PlaceDevice.ReadWrite.All","Read and write all workplace devices","Allows the app to read and write all workplace devices, on behalf of the signed-in user."
"572fea84-0151-49b2-9301-11cb16974376","Policy.Read.All","Read your organization's policies","Allows the app to read your organization's policies on behalf of the signed-in user."
"633e0fce-8c58-4cfb-9495-12bbd5a24f7c","Policy.Read.ConditionalAccess","Read your organization's conditional access policies","Allows the app to read your organization's conditional access policies on behalf of the signed-in user."
"d146432f-b803-4ed4-8d42-ba74193a6ede","Policy.Read.IdentityProtection","Read your organization’s identity protection policy","Allows the app to read your organization’s identity protection policy on behalf of the signed-in user. "
"414de6ea-2d92-462f-b120-6e2a809a6d01","Policy.Read.PermissionGrant","Read consent and permission grant policies","Allows the app to read policies related to consent and permission grants for applications, on behalf of the signed-in user."
"4f5bc9c8-ea54-4772-973a-9ca119cb0409","Policy.ReadWrite.AccessReview","Read and write your organization's directory access review default policy","Allows the app to read and write your organization's directory access review default policy on behalf of the signed-in user."
"b27add92-efb2-4f16-84f5-8108ba77985c","Policy.ReadWrite.ApplicationConfiguration","Read and write your organization's application configuration policies","Allows the app to read and write your organization's application configuration policies on behalf of the signed-in user.  This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy,  tokenIssuancePolicy and tokenLifetimePolicy."
"edb72de9-4252-4d03-a925-451deef99db7","Policy.ReadWrite.AuthenticationFlows","Read and write authentication flow policies","Allows the app to read and write the authentication flow policies, on behalf of the signed-in user. "
"7e823077-d88e-468f-a337-e18f1f0e6c7c","Policy.ReadWrite.AuthenticationMethod","Read and write authentication method policies","Allows the app to read and write the authentication method policies, on behalf of the signed-in user. "
"edd3c878-b384-41fd-95ad-e7407dd775be","Policy.ReadWrite.Authorization","Read and write your organization's authorization policy","Allows the app to read and write your organization's authorization policy on behalf of the signed-in user.  For example, authorization policies can control some of the permissions that the out-of-the-box user role has by default."
"ad902697-1014-4ef5-81ef-2b4301988e8c","Policy.ReadWrite.ConditionalAccess","Read and write your organization's conditional access policies","Allows the app to read and write your organization's conditional access policies on behalf of the signed-in user."
"4d135e65-66b8-41a8-9f8b-081452c91774","Policy.ReadWrite.ConsentRequest","Read and write consent request policy","Allows the app to read and write your organization's consent requests policy on behalf of the signed-in user."
"014b43d0-6ed4-4fc6-84dc-4b6f7bae7d85","Policy.ReadWrite.CrossTenantAccess","Read and write your organization's cross tenant access policies","Allows the app to read and write your organization's cross tenant access policies on behalf of the signed-in user."
"40b534c3-9552-4550-901b-23879c90bcf9","Policy.ReadWrite.DeviceConfiguration","Read and write your organization's device configuration policies","Allows the app to read and write your organization's device configuration policies on behalf of the signed-in user.  For example, device registration policy can limit initial provisioning controls using quota restrictions, additional authentication and authorization checks."
"b5219784-1215-45b5-b3f1-88fe1081f9c0","Policy.ReadWrite.ExternalIdentities","Read and write your organization's external identities policy","Allows the application to read and update the organization's external identities policy on behalf of the signed-in user.  For example, external identities policy controls if users invited to access resources in your organization via B2B collaboration or B2B direct connect are allowed to self-service leave."
"92a38652-f13b-4875-bc77-6e1dbb63e1b2","Policy.ReadWrite.FeatureRollout","Read and write your organization's feature rollout policies","Allows the app to read and write your organization's feature rollout policies on behalf of the signed-in user. Includes abilities to assign and remove users and groups to rollout of a specific feature."
"be1be369-4540-4ac9-8928-79de99f70d8f","Policy.ReadWrite.FedTokenValidation","Read and write your organization's federated token validation policy","Allows the application to read and update the organization's federated token validation policy on behalf of the signed-in user."
"7256e131-3efb-4323-9854-cf41c6021770","Policy.ReadWrite.IdentityProtection","Read and write your organization’s identity protection policy ","Allows the app to read and write your organization’s identity protection policy on behalf of the signed-in user."
"a8ead177-1889-4546-9387-f25e658e2a79","Policy.ReadWrite.MobilityManagement","Read and write your organization's mobility management policies","Allows the app to read and write your organization's mobility management policies on behalf of the signed-in user.  For example, a mobility management policy can set the enrollment scope for a given mobility management application."
"2672f8bb-fd5e-42e0-85e1-ec764dd2614e","Policy.ReadWrite.PermissionGrant","Manage consent and permission grant policies","Allows the app to manage policies related to consent and permission grants for applications, on behalf of the signed-in user."
"0b2a744c-2abf-4f1e-ad7e-17a087e2be99","Policy.ReadWrite.SecurityDefaults","Read and write your organization's security defaults policy","Allows the app to read and write your organization's security defaults policy on behalf of the signed-in user."
"cefba324-1a70-4a6e-9c1d-fd670b7ae392","Policy.ReadWrite.TrustFramework","Read and write your organization's trust framework policies","Allows the app to read and write your organization's trust framework policies on behalf of the signed-in user."
"d7b7f2d9-0f45-4ea1-9d42-e50810c06991","POP.AccessAsUser.All","Read and write access to mailboxes via POP.","Allows the app to have the same access to mailboxes as the signed-in user via POP protocol."
"76bc735e-aecd-4a1d-8b4c-2b915deabb79","Presence.Read","Read user's presence information","Allows the app to read presence information on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location."
"9c7a330d-35b3-4aa1-963d-cb2b9f927841","Presence.Read.All","Read presence information of all users in your organization","Allows the app to read presence information of all users in the directory on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location."
"8d3c54a7-cf58-4773-bf81-c0cd6ad522bb","Presence.ReadWrite","Read and write a user's presence information","Allows the app to read the presence information and write activity and availability on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location."
"d69c2d6d-4f72-4f99-a6b9-663e32f8cf68","PrintConnector.Read.All","Read print connectors","Allows the application to read print connectors on behalf of the signed-in user."
"79ef9967-7d59-4213-9c64-4b10687637d8","PrintConnector.ReadWrite.All","Read and write print connectors","Allows the application to read and write print connectors on behalf of the signed-in user. "
"90c30bed-6fd1-4279-bf39-714069619721","Printer.Create","Register printers  ","Allows the application to create (register) printers on behalf of the signed-in user. "
"93dae4bd-43a1-4a23-9a1a-92957e1d9121","Printer.FullControl.All","Register, read, update, and unregister printers","Allows the application to create (register), read, update, and delete (unregister) printers on behalf of the signed-in user. "
"3a736c8a-018e-460a-b60c-863b2683e8bf","Printer.Read.All","Read printers","Allows the application to read printers on behalf of the signed-in user. "
"89f66824-725f-4b8f-928e-e1c5258dc565","Printer.ReadWrite.All","Read and update printers","Allows the application to read and update printers on behalf of the signed-in user. Does not allow creating (registering) or deleting (unregistering) printers."
"ed11134d-2f3f-440d-a2e1-411efada2502","PrinterShare.Read.All","Read printer shares","Allows the application to read printer shares on behalf of the signed-in user. "
"5fa075e9-b951-4165-947b-c63396ff0a37","PrinterShare.ReadBasic.All","Read basic information about printer shares","Allows the application to read basic information about printer shares on behalf of the signed-in user. Does not allow reading access control information."
"06ceea37-85e2-40d7-bec3-91337a46038f","PrinterShare.ReadWrite.All","Read and write printer shares","Allows the application to read and update printer shares on behalf of the signed-in user. "
"21f0d9c0-9f13-48b3-94e0-b6b231c7d320","PrintJob.Create","Create print jobs","Allows the application to create print jobs on behalf of the signed-in user and upload document content to print jobs that the signed-in user created."
"248f5528-65c0-4c88-8326-876c7236df5e","PrintJob.Read","Read user's print jobs","Allows the application to read the metadata and document content of print jobs that the signed-in user created."
"afdd6933-a0d8-40f7-bd1a-b5d778e8624b","PrintJob.Read.All","Read print jobs","Allows the application to read the metadata and document content of print jobs on behalf of the signed-in user. "
"6a71a747-280f-4670-9ca0-a9cbf882b274","PrintJob.ReadBasic","Read basic information of user's print jobs","Allows the application to read the metadata of print jobs that the signed-in user created. Does not allow access to print job document content."
"04ce8d60-72ce-4867-85cf-6d82f36922f3","PrintJob.ReadBasic.All","Read basic information of print jobs","Allows the application to read the metadata of print jobs on behalf of the signed-in user. Does not allow access to print job document content."
"b81dd597-8abb-4b3f-a07a-820b0316ed04","PrintJob.ReadWrite","Read and write user's print jobs","Allows the application to read and update the metadata and document content of print jobs that the signed-in user created."
"036b9544-e8c5-46ef-900a-0646cc42b271","PrintJob.ReadWrite.All","Read and write print jobs","Allows the application to read and update the metadata and document content of print jobs on behalf of the signed-in user. "
"6f2d22f2-1cb6-412c-a17c-3336817eaa82","PrintJob.ReadWriteBasic","Read and write basic information of user's print jobs","Allows the application to read and update the metadata of print jobs that the signed-in user created. Does not allow access to print job document content."
"3a0db2f6-0d2a-4c19-971b-49109b19ad3d","PrintJob.ReadWriteBasic.All","Read and write basic information of print jobs","Allows the application to read and update the metadata of print jobs on behalf of the signed-in user. Does not allow access to print job document content."
"490f32fd-d90f-4dd7-a601-ff6cdc1a3f6c","PrintSettings.Read.All","Read tenant-wide print settings","Allows the application to read tenant-wide print settings on behalf of the signed-in user."
"9ccc526a-c51c-4e5c-a1fd-74726ef50b8f","PrintSettings.ReadWrite.All","Read and write tenant-wide print settings","Allows the application to read and write tenant-wide print settings on behalf of the signed-in user."
"b3a539c9-59cb-4ad5-825a-041ddbdc2bdb","PrivilegedAccess.Read.AzureAD","Read privileged access to Azure AD","Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD built-in and custom administrative roles, on behalf of the signed-in user."
"d329c81c-20ad-4772-abf9-3f6fdb7e5988","PrivilegedAccess.Read.AzureADGroup","Read privileged access to Azure AD groups","Allows the app to read time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on behalf of the signed-in user."
"1d89d70c-dcac-4248-b214-903c457af83a","PrivilegedAccess.Read.AzureResources","Read privileged access to Azure resources","Allows the app to read time-based assignment and just-in-time elevation of Azure resources (like your subscriptions, resource groups, storage, compute) on behalf of the signed-in user."
"3c3c74f5-cdaa-4a97-b7e0-4e788bfcfb37","PrivilegedAccess.ReadWrite.AzureAD","Read and write privileged access to Azure AD","Allows the app to request and manage just in time elevation (including scheduled elevation) of users to Azure AD built-in administrative roles, on behalf of signed-in users."
"32531c59-1f32-461f-b8df-6f8a3b89f73b","PrivilegedAccess.ReadWrite.AzureADGroup","Read and write privileged access to Azure AD groups","Allows the app to request and manage time-based assignment and just-in-time elevation (including scheduled elevation) of Azure AD groups, on behalf of the signed-in user."
"a84a9652-ffd3-496e-a991-22ba5529156a","PrivilegedAccess.ReadWrite.AzureResources","Read and write privileged access to Azure resources","Allows the app to request and manage time-based assignment and just-in-time elevation of user privileges to manage Azure resources (like subscriptions, resource groups, storage, compute) on behalf of the signed-in users."
"02a32cc4-7ab5-4b58-879a-0586e0f7c495","PrivilegedAssignmentSchedule.Read.AzureADGroup","Read assignment schedules for access to Azure AD groups","Allows the app to read time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user."
"06dbc45d-6708-4ef0-a797-f797ee68bf4b","PrivilegedAssignmentSchedule.ReadWrite.AzureADGroup","Read, create, and delete assignment schedules for access to Azure AD groups","Allows the app to read, create, and delete time-based assignment schedules for access to Azure AD groups, on behalf of the signed-in user."
"8f44f93d-ecef-46ae-a9bf-338508d44d6b","PrivilegedEligibilitySchedule.Read.AzureADGroup","Read eligibility schedules for access to Azure AD groups","Allows the app to read time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user."
"ba974594-d163-484e-ba39-c330d5897667","PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup","Read, create, and delete eligibility schedules for access to Azure AD groups","Allows the app to read, create, and delete time-based eligibility schedules for access to Azure AD groups, on behalf of the signed-in user."
"14dad69e-099b-42c9-810b-d002981feec1","profile","View users' basic profile","Allows the app to see your users' basic profile (e.g., name, picture, user name, email address)"
"469cd065-729e-4dee-b1fa-d92e0fab6310","ProfilePhoto.Read.All","Read profile photo of a user or group","Allows the app to read all profile photos of users and groups, on behalf of the the signed-in user."
"f5b24df7-511e-48bb-ae88-643f023b55e1","ProfilePhoto.ReadWrite.All","Read and write profile photo of a user or group","Allows the app to read and write all profile photos of users and groups, on behalf of the the signed-in user."
"c492a2e1-2f8f-4caa-b076-99bbf6e40fe4","ProgramControl.Read.All","Read all programs that user can access","Allows the app to read programs and program controls that the signed-in user has access to in the organization."
"50fd364f-9d93-4ae1-b170-300e87cccf84","ProgramControl.ReadWrite.All","Manage all programs that user can access","Allows the app to read, update, delete and perform actions on programs and program controls that the signed-in user has access to in the organization."
"04a4b2a2-3f26-4fc8-87ee-9c46e68db175","PublicKeyInfrastructure.Read.All","Read certificate based authentication configurations","Allows the application to read certificate-based authentication configuration such as all public key infrastructures (PKI) and certificate authorities (CA) configured for the organization, on behalf of the signed-in user."
"3591b7f3-dba8-4bad-b667-7a64bd4f2b83","PublicKeyInfrastructure.ReadWrite.All","Read and write certificate based authentication configurations","Allows the application to read  and write certificate-based authentication configuration such as all public key infrastructures (PKI) and certificate authorities (CA) configured for the organization, on behalf of the signed-in user."
"f73fa04f-b9a5-4df9-8843-993ce928925e","QnA.Read.All","Read all Questions and Answers that the user can access.","Allows an app to read all question and answer sets that the signed-in user can access."
"07f995eb-fc67-4522-ad66-2b8ca8ea3efd","RecordsManagement.Read.All","Read Records Management configuration, labels, and policies","Allows the application to read any data from Records Management, such as configuration, labels, and policies on behalf of the signed-in user."
"f2833d75-a4e6-40ab-86d4-6dfe73c97605","RecordsManagement.ReadWrite.All","Read and write Records Management configuration, labels, and policies","Allow the application to create, update and delete any data from Records Management, such as configuration, labels, and policies on behalf of the signed-in user."
"02e97553-ed7b-43d0-ab3c-f8bace0d040c","Reports.Read.All","Read all usage reports","Allows an app to read all service usage reports on behalf of the signed-in user.  Services that provide usage reports include Office 365 and Azure Active Directory."
"84fac5f4-33a9-4100-aa38-a20c6d29e5e7","ReportSettings.Read.All","Read admin report settings","Allows the app to read admin report settings, such as whether to display concealed information in reports, on behalf of the signed-in user"
"b955410e-7715-4a88-a940-dfd551018df3","ReportSettings.ReadWrite.All","Read and write admin report settings","Allows the app to read and update admin report settings, such as whether to display concealed information in reports, on behalf of the signed-in user."
"f1d91a8f-88e7-4774-8401-b668d5bca0c5","ResourceSpecificPermissionGrant.ReadForUser","Read resource specific permissions granted on a user account","Allows the app to read the resource specific permissions granted on a user account, on behalf of the signed-in user."
"344a729c-0285-42c6-9014-f12b9b8d6129","RoleAssignmentSchedule.Read.Directory","Read all active role assignments for your company's directory","Allows the app to read the active role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, and directory roles."
"8c026be3-8e26-4774-9372-8d5d6f21daff","RoleAssignmentSchedule.ReadWrite.Directory","Read, update, and delete all active role assignments for your company's directory","Allows the app to read and manage the active role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes managing active directory role membership, and reading directory role templates, directory roles and active memberships."
"eb0788c2-6d4e-4658-8c9e-c0fb8053f03d","RoleEligibilitySchedule.Read.Directory","Read all eligible role assignments for your company's directory","Allows the app to read the eligible role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes reading directory role templates, and directory roles."
"62ade113-f8e0-4bf9-a6ba-5acb31db32fd","RoleEligibilitySchedule.ReadWrite.Directory","Read, update, and delete  all eligible role assignments for your company's directory","Allows the app to read and manage the eligible role-based access control (RBAC) assignments for your company's directory, on behalf of the signed-in user. This includes managing eligible directory role membership, and reading directory role templates, directory roles and eligible memberships."
"48fec646-b2ba-4019-8681-8eb31435aded","RoleManagement.Read.All","Read role management data for all RBAC providers","Allows the app to read the role-based access control (RBAC) settings for all RBAC providers, on behalf of the signed-in user.  This includes reading role definitions and role assignments."
"9619b88a-8a25-48a7-9571-d23be0337a79","RoleManagement.Read.CloudPC","Read Cloud PC RBAC settings","Allows the app to read the Cloud PC role-based access control (RBAC) settings, on behalf of the signed-in user.  This includes reading Cloud PC role definitions and role assignments."
"741c54c3-0c1e-44a1-818b-3f97ab4e8c83","RoleManagement.Read.Directory","Read directory RBAC settings","Allows the app to read the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user.  This includes reading directory role templates, directory roles and memberships."
"3bc15058-7858-4141-b24f-ae43b4e80b52","RoleManagement.Read.Exchange","Read Exchange Online RBAC configuration","Allows the app to read the role-based access control (RBAC) settings for your organization's Exchange Online service, on behalf of the signed-in user. This includes reading Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies."
"501d06f8-07b8-4f18-b5c6-c191a4af7a82","RoleManagement.ReadWrite.CloudPC","Read and write Cloud PC RBAC settings","Allows the app to read and manage the Cloud PC role-based access control (RBAC) settings, on behalf of the signed-in user. This includes reading and managing Cloud PC role definitions and role assignments."
"d01b97e9-cbc0-49fe-810a-750afd5527a3","RoleManagement.ReadWrite.Directory","Read and write directory RBAC settings","Allows the app to read and manage the role-based access control (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes instantiating directory roles and managing directory role membership, and reading directory role templates, directory roles and memberships."
"c1499fe0-52b1-4b22-bed2-7a244e0e879f","RoleManagement.ReadWrite.Exchange","Read and write Exchange Online RBAC configuration","Allows the app to read and manage the role-based access control (RBAC) settings for your organization's Exchange Online service, on behalf of the signed-in user. This includes reading, creating, updating, and deleting Exchange management role definitions, role groups, role group membership, role assignments, management scopes, and role assignment policies."
"cce71173-f76d-446e-97ff-efb2d82e11b1","RoleManagementAlert.Read.Directory","Read all alert data for your company's directory","Allows the app to read the role-based access control (RBAC) alerts for your company's directory, on behalf of the signed-in user. This includes reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert."
"435644c6-a5b1-40bf-8f52-fe8e5b53e19c","RoleManagementAlert.ReadWrite.Directory","Read all alert data, configure alerts, and take actions on all alerts for your company's directory","Allows the app to read and manage the role-based access control (RBAC) alerts for your company's directory, on behalf of the signed-in user. This includes managing alert settings, initiating alert scans, dimissing alerts, remediating alert incidents, and reading alert statuses, alert definitions, alert configurations and incidents that lead to an alert."
"7e26fdff-9cb1-4e56-bede-211fe0e420e8","RoleManagementPolicy.Read.AzureADGroup","Read all policies in PIM for Groups","Allows the app to read policies in Privileged Identity Management for Groups, on behalf of the signed-in user."
"3de2cdbe-0ff5-47d5-bdee-7f45b4749ead","RoleManagementPolicy.Read.Directory","Read all policies for privileged role assignments of your company's directory","Allows the app to read policies for privileged role-based access control (RBAC) assignments of your company's directory, on behalf of the signed-in user."
"0da165c7-3f15-4236-b733-c0b0f6abe41d","RoleManagementPolicy.ReadWrite.AzureADGroup","Read, update, and delete all policies in PIM for Groups","Allows the app to read, update, and delete policies in Privileged Identity Management for Groups, on behalf of the signed-in user."
"1ff1be21-34eb-448c-9ac9-ce1f506b2a68","RoleManagementPolicy.ReadWrite.Directory","Read, update, and delete all policies for privileged role assignments of your company's directory","Allows the app to read, update, and delete policies for privileged role-based access control (RBAC) assignments of your company's directory, on behalf of the signed-in user."
"fccf6dd8-5706-49fa-811f-69e2e1b585d0","Schedule.Read.All","Read user schedule items","Allows the app to read schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on behalf of the signed-in user."
"63f27281-c9d9-4f29-94dd-6942f7f1feb0","Schedule.ReadWrite.All","Read and write user schedule items","Allows the app to manage schedule, schedule groups, shifts and associated entities in the Teams or Shifts application on behalf of the signed-in user."
"07919803-6073-4cd8-bc55-28077db0ee10","SchedulePermissions.ReadWrite.All","Read/Write schedule permissions for a role.","Allows the app to read/write schedule permissions for a specific role in Shifts application on behalf of the signed-in user."
"7d307522-aa38-4cd0-bd60-90c6f0ac50bd","SearchConfiguration.Read.All","Read your organization's search configuration","Allows the app to read search configuration, on behalf of the signed-in user."
"b1a7d408-cab0-47d2-a2a5-a74a3733600d","SearchConfiguration.ReadWrite.All","Read and write your organization's search configuration","Allows the app to read and write search configuration, on behalf of the signed-in user."
"1638cddf-07a4-4de2-8645-69c96cacad73","SecurityActions.Read.All","Read your organization's security actions","Allows the app to read security actions, on behalf of the signed-in user."
"dc38509c-b87d-4da0-bd92-6bec988bac4a","SecurityActions.ReadWrite.All","Read and update your organization's security actions","Allows the app to read or update security actions, on behalf of the signed-in user."
"bc257fb8-46b4-4b15-8713-01e91bfbe4ea","SecurityAlert.Read.All","Read all security alerts","Allows the app to read all security alerts, on behalf of the signed-in user."
"471f2a7f-2a42-4d45-a2bf-594d0838070d","SecurityAlert.ReadWrite.All","Read and write to all security alerts","Allows the app to read and write to all security alerts, on behalf of the signed-in user."
"53e6783e-b127-4a35-ab3a-6a52d80a9077","SecurityAnalyzedMessage.Read.All","Read metadata and detection details for emails in your organization","Read email metadata and security detection details on behalf of the signed in user."
"48eb8c83-6e58-46e7-a6d3-8805822f5940","SecurityAnalyzedMessage.ReadWrite.All","Read metadata, detection details, and execute remediation actions on emails in your organization","Read email metadata, security detection details, and execute remediation actions like deleting an email, on behalf of the signed in user."
"64733abd-851e-478a-bffb-e47a14b18235","SecurityEvents.Read.All","Read your organization’s security events","Allows the app to read your organization’s security events on behalf of the signed-in user."
"6aedf524-7e1c-45a7-bd76-ded8cab8d0fc","SecurityEvents.ReadWrite.All","Read and update your organization’s security events","Allows the app to read your organization’s security events on behalf of the signed-in user. Also allows the app to update editable properties in security events on behalf of the signed-in user."
"a0d0da43-a6df-4416-b63d-99c79991aae8","SecurityIdentitiesHealth.Read.All","Read identity security health issues","Allows the app to read all the identity security health issues of signed user"
"53e51eec-2d9b-4990-97f3-c9aa5d5652c3","SecurityIdentitiesHealth.ReadWrite.All","Read and write identity security health issues","Allows the app to read and write identity security health issues on behalf of the signed-in user."
"b9abcc4f-94fc-4457-9141-d20ce80ec952","SecurityIncident.Read.All","Read incidents","Allows the app to read security incidents, on behalf of the signed-in user."
"128ca929-1a19-45e6-a3b8-435ec44a36ba","SecurityIncident.ReadWrite.All","Read and write to incidents","Allows the app to read and write security incidents, on behalf of the signed-in user."
"1fe7aa48-9373-4a47-8df3-168335e0f4c9","ServiceActivity-Exchange.Read.All","Read all Exchange service activity","Allows the app to read all Exchange service activity, on behalf of the signed-in user."
"d74c75b1-d5a9-479d-902d-92f8f99182c1","ServiceActivity-Microsoft365Web.Read.All","Read all Microsoft 365 Web service activity","Allows the app to read all Microsoft 365 Web service activity, on behalf of the signed-in user."
"347e3c16-30f3-4ac7-9b52-fc3c053de9c9","ServiceActivity-OneDrive.Read.All","Read all One Drive service activity","Allows the app to read all One Drive service activity, on behalf of the signed-in user."
"404d76f0-e10e-460a-92be-ef19600c54d1","ServiceActivity-Teams.Read.All","Read all Teams service activity","Allows the app to read all Teams service activity, on behalf of the signed-in user."
"55896846-df78-47a7-aa94-8d3d4442ca7f","ServiceHealth.Read.All","Read service health","Allows the app to read your tenant's service health information on behalf of the signed-in user. Health information may include service issues or service health overviews."
"eda39fa6-f8cf-4c3c-a909-432c683e4c9b","ServiceMessage.Read.All","Read service announcement messages","Allows the app to read your tenant's service announcement messages on behalf of the signed-in user. Messages may include information about new or changed features."
"636e1b0b-1cc2-4b1c-9aa9-4eeed9b9761b","ServiceMessageViewpoint.Write","Update user status on service announcement messages","Allows the app to update service announcement messages' user status on behalf of the signed-in user. The message status can be marked as read, archive, or favorite."
"9f9ce928-e038-4e3b-8faf-7b59049a8ddc","ServicePrincipalEndpoint.Read.All","Read service principal endpoints","Allows the app to read service principal endpoints"
"7297d82c-9546-4aed-91df-3d4f0a9b3ff0","ServicePrincipalEndpoint.ReadWrite.All","Read and update service principal endpoints","Allows the app to update service principal endpoints"
"2ef70e10-5bfd-4ede-a5f6-67720500b258","SharePointTenantSettings.Read.All","Read SharePoint and OneDrive tenant settings","Allows the application to read the tenant-level settings in SharePoint and OneDrive on behalf of the signed-in user."
"aa07f155-3612-49b8-a147-6c590df35536","SharePointTenantSettings.ReadWrite.All","Read and change SharePoint and OneDrive tenant settings","Allows the application to read and change the tenant-level settings of SharePoint and OneDrive on behalf of the signed-in user."
"50f66e47-eb56-45b7-aaa2-75057d9afe08","ShortNotes.Read","Read short notes of the signed-in user","Allows the app to read all the short notes a sign-in user has access to."
"328438b7-4c01-4c07-a840-e625a749bb89","ShortNotes.ReadWrite","Read, create, edit, and delete short notes of the signed-in user","Allows the app to read, create, edit, and delete short notes of a signed-in user."
"5a54b8b3-347c-476d-8f8e-42d5c7424d29","Sites.FullControl.All","Have full control of all site collections","Allows the application to have full control of all site collections on behalf of the signed-in user."
"65e50fdc-43b7-4915-933e-e8138f11f40a","Sites.Manage.All","Create, edit, and delete items and lists in all site collections","Allows the application to create or delete document libraries and lists in all site collections on behalf of the signed-in user."
"205e70e5-aba6-4c52-a976-6d2d46c48043","Sites.Read.All","Read items in all site collections","Allows the application to read documents and list  items in all site collections on behalf of the signed-in user"
"89fe6a52-be36-487e-b7d8-d061c450a026","Sites.ReadWrite.All","Edit or delete items in all site collections","Allows the application to edit or delete documents and list items in all site collections on behalf of the signed-in user."
"f89c84ef-20d0-4b54-87e9-02e856d66d53","Sites.Selected","Access selected Sites, on behalf of the signed-in user","Allow the application to access a subset of site collections on behalf of the signed-in user.  The specific site collections and the permissions granted will be configured in SharePoint Online."
"258f6531-6087-4cc4-bb90-092c5fb3ed3f","SMTP.Send","Send emails from mailboxes using SMTP AUTH.","Allows the app to be able to send emails from the user’s mailbox using the SMTP AUTH client submission protocol."
"9b4aa4b1-aaf3-41b7-b743-698b27e77ff6","SpiffeTrustDomain.Read.All","Read SPIFFE trust domains and child resources","Allows the app to read your organization's SPIFFE trust domains and child resources on behalf of the user."
"8ba47079-8c47-4bfe-b2ce-13f28ef37247","SpiffeTrustDomain.ReadWrite.All","Read and write SPIFFE trust domains and child resources","Allows the app to read and write your organization's SPIFFE trust domains and child resources on behalf of the user."
"9c3af74c-fd0f-4db4-b17a-71939e2a9d77","SubjectRightsRequest.Read.All","Read subject rights requests","Allows the app to read subject rights requests on behalf of the signed-in user"
"2b8fcc74-bce1-4ae3-a0e8-60c53739299d","SubjectRightsRequest.ReadWrite.All","Read and write subject rights requests","Allows the app to read and write subject rights requests on behalf of the signed-in user"
"5f88184c-80bb-4d52-9ff2-757288b2e9b7","Subscription.Read.All","Read all webhook subscriptions ","Allows the app to read all webhook subscriptions on behalf of the signed-in user."
"7aa02aeb-824f-4fbe-a3f7-611f751f5b55","Synchronization.Read.All","Read all Azure AD synchronization data","Allows the app to read Azure AD synchronization information, on behalf of the signed-in user."
"7bb27fa3-ea8f-4d67-a916-87715b6188bd","Synchronization.ReadWrite.All","Read and write all Azure AD synchronization data","Allows the app to configure the Azure AD synchronization service, on behalf of the signed-in user."
"1a2e7420-4e92-4d2b-94cb-fb2952e9ddf7","SynchronizationData-User.Upload","Upload user data to the identity synchronization service","Allows the app to upload bulk user data to the identity synchronization service, on behalf of the signed-in user."
"f45671fb-e0fe-4b4b-be20-3d3ce43f1bcb","Tasks.Read","Read user's tasks and task lists","Allows the app to read the signed-in user’s tasks and task lists, including any shared with the user. Doesn't include permission to create, delete, or update anything."
"88d21fd4-8e5a-4c32-b5e2-4a1c95f34f72","Tasks.Read.Shared","Read user and shared tasks","Allows the app to read tasks a user has permissions to access, including their own and shared tasks."
"2219042f-cab5-40cc-b0d2-16b1540b4c5f","Tasks.ReadWrite","Create, read, update, and delete user’s tasks and task lists","Allows the app to create, read, update, and delete the signed-in user's tasks and task lists, including any shared with the user."
"c5ddf11b-c114-4886-8558-8a4e557cd52b","Tasks.ReadWrite.Shared","Read and write user and shared tasks","Allows the app to create, read, update, and delete tasks a user has permissions to, including their own and shared tasks."
"7825d5d6-6049-4ce7-bdf6-3b8d53f4bcd0","Team.Create","Create teams","Allows the app to create teams on behalf of the signed-in user."
"485be79e-c497-4b35-9400-0e3fa7f2a5d4","Team.ReadBasic.All","Read the names and descriptions of teams","Read the names and  descriptions of teams, on behalf of the signed-in user."
"2497278c-d82d-46a2-b1ce-39d4cdde5570","TeamMember.Read.All","Read the members of teams","Read the members of teams, on behalf of the signed-in user."
"4a06efd2-f825-4e34-813e-82a57b03d1ee","TeamMember.ReadWrite.All","Add and remove members from teams","Add and remove members from teams, on behalf of the signed-in user. Also allows changing a member's role, for example from owner to non-owner."
"2104a4db-3a2f-4ea0-9dba-143d457dc666","TeamMember.ReadWriteNonOwnerRole.All","Add and remove members with non-owner role for all teams","Add and remove members from all teams, on behalf of the signed-in user. Does not allow adding or removing a member with the owner role. Additionally, does not allow the app to elevate an existing member to the owner role."
"0e755559-83fb-4b44-91d0-4cc721b9323e","TeamsActivity.Read","Read user's teamwork activity feed","Allows the app to read the signed-in user's teamwork activity feed."
"7ab1d787-bae7-4d5d-8db6-37ea32df9186","TeamsActivity.Send","Send a teamwork activity as the user","Allows the app to create new notifications in users' teamwork activity feeds on behalf of the signed in user. These notifications may not be discoverable or be held or governed by compliance policies."
"bf3fbf03-f35f-4e93-963e-47e4d874c37a","TeamsAppInstallation.ReadForChat","Read installed Teams apps in chats","Allows the app to read the Teams apps that are installed in chats the signed-in user can access. Does not give the ability to read application-specific settings."
"5248dcb1-f83b-4ec3-9f4d-a4428a961a72","TeamsAppInstallation.ReadForTeam","Read installed Teams apps in teams","Allows the app to read the Teams apps that are installed in teams the signed-in user can access. Does not give the ability to read application-specific settings."
"c395395c-ff9a-4dba-bc1f-8372ba9dca84","TeamsAppInstallation.ReadForUser","Read user's installed Teams apps","Allows the app to read the Teams apps that are installed for the signed-in user. Does not give the ability to read application-specific settings."
"e1408a66-8f82-451b-a2f3-3c3e38f7413f","TeamsAppInstallation.ReadWriteAndConsentForChat","Manage installed Teams apps in chats","Allows the app to read, install, upgrade, and uninstall Teams apps in chats the signed-in user can access. Gives the ability to manage permission grants for accessing those specific chats' data."
"946349d5-2a9d-4535-abc0-7beeacaedd1d","TeamsAppInstallation.ReadWriteAndConsentForTeam","Manage installed Teams apps in teams","Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Gives the ability to manage permission grants for accessing those specific teams' data."
"2da62c49-dfbd-40df-ba16-fef3529d391c","TeamsAppInstallation.ReadWriteAndConsentForUser","Manage installation and permission grants of Teams apps in users' personal scope","Allows the app to read, install, upgrade, and uninstall Teams apps in user accounts, on behalf of the signed-in user. Gives the ability to manage permission grants for accessing those specific users' data."
"a0e0e18b-8fb2-458f-8130-da2d7cab9c75","TeamsAppInstallation.ReadWriteAndConsentSelfForChat","Allow the Teams app to manage itself and its permission grants in chats","Allows a Teams app to read, install, upgrade, and uninstall itself in chats the signed-in user can access, and manage its permission grants for accessing those specific chats' data."
"4a6bbf29-a0e1-4a4d-a7d1-cef17f772975","TeamsAppInstallation.ReadWriteAndConsentSelfForTeam","Allow the Teams app to manage itself and its permission grants in teams","Allows a Teams app to read, install, upgrade, and uninstall itself in teams the signed-in user can access, and manage its permission grants for accessing those specific teams' data."
"7a349935-c54d-44ab-ab66-1b460d315be7","TeamsAppInstallation.ReadWriteAndConsentSelfForUser","Allow the Teams app to manage itself and its permission grants in user accounts","Allows a Teams app to read, install, upgrade, and uninstall itself in user accounts, and manage its permission grants for accessing those specific users' data, on behalf of the signed-in user."
"aa85bf13-d771-4d5d-a9e6-bca04ce44edf","TeamsAppInstallation.ReadWriteForChat","Manage installed Teams apps in chats","Allows the app to read, install, upgrade, and uninstall Teams apps in chats the signed-in user can access. Does not give the ability to read application-specific settings."
"2e25a044-2580-450d-8859-42eeb6e996c0","TeamsAppInstallation.ReadWriteForTeam","Manage installed Teams apps in teams","Allows the app to read, install, upgrade, and uninstall Teams apps in teams the signed-in user can access. Does not give the ability to read application-specific settings."
"093f8818-d05f-49b8-95bc-9d2a73e9a43c","TeamsAppInstallation.ReadWriteForUser","Manage user's installed Teams apps","Allows the app to read, install, upgrade, and uninstall Teams apps installed for the signed-in user. Does not give the ability to read application-specific settings."
"0ce33576-30e8-43b7-99e5-62f8569a4002","TeamsAppInstallation.ReadWriteSelfForChat","Allow the Teams app to manage itself in chats","Allows a Teams app to read, install, upgrade, and uninstall itself in chats the signed-in user can access."
"0f4595f7-64b1-4e13-81bc-11a249df07a9","TeamsAppInstallation.ReadWriteSelfForTeam","Allow the app to manage itself in teams","Allows a Teams app to read, install, upgrade, and uninstall itself to teams the signed-in user can access."
"207e0cb1-3ce7-4922-b991-5a760c346ebc","TeamsAppInstallation.ReadWriteSelfForUser","Allow the Teams app to manage itself for a user","Allows a Teams app to read, install, upgrade, and uninstall itself for the signed-in user."
"48638b3c-ad68-4383-8ac4-e6880ee6ca57","TeamSettings.Read.All","Read teams' settings","Read all teams' settings, on behalf of the signed-in user."
"39d65650-9d3e-4223-80db-a335590d027e","TeamSettings.ReadWrite.All","Read and change teams' settings","Read and change all teams' settings, on behalf of the signed-in user."
"a9ff19c2-f369-4a95-9a25-ba9d460efc8e","TeamsTab.Create","Create tabs in Microsoft Teams.","Allows the app to create tabs in any team in Microsoft Teams, on behalf of the signed-in user. This does not grant the ability to read, modify or delete tabs after they are created, or give access to the content inside the tabs."
"59dacb05-e88d-4c13-a684-59f1afc8cc98","TeamsTab.Read.All","Read tabs in Microsoft Teams.","Read the names and settings of tabs inside any team in Microsoft Teams, on behalf of the signed-in user. This does not give access to the content inside the tabs."
"b98bfd41-87c6-45cc-b104-e2de4f0dafb9","TeamsTab.ReadWrite.All","Read and write tabs in Microsoft Teams.","Read and write tabs in any team in Microsoft Teams, on behalf of the signed-in user. This does not give access to the content inside the tabs."
"ee928332-e9c2-4747-b4a0-f8c164b68de6","TeamsTab.ReadWriteForChat","Allow the Teams app to manage all tabs in chats","Allows a Teams app to read, install, upgrade, and uninstall all tabs in chats the signed-in user can access."
"c975dd04-a06e-4fbb-9704-62daad77bb49","TeamsTab.ReadWriteForTeam","Allow the Teams app to manage all tabs in teams","Allows a Teams app to read, install, upgrade, and uninstall all tabs to teams the signed-in user can access."
"c37c9b61-7762-4bff-a156-afc0005847a0","TeamsTab.ReadWriteForUser","Allow the Teams app to manage all tabs for a user","Allows a Teams app to read, install, upgrade, and uninstall all tabs for the signed-in user."
"0c219d04-3abf-47f7-912d-5cca239e90e6","TeamsTab.ReadWriteSelfForChat","Allow the Teams app to manage only its own tabs in chats","Allows a Teams app to read, install, upgrade, and uninstall its own tabs in chats the signed-in user can access."
"f266662f-120a-4314-b26a-99b08617c7ef","TeamsTab.ReadWriteSelfForTeam","Allow the Teams app to manage only its own tabs in teams","Allows a Teams app to read, install, upgrade, and uninstall its own tabs to teams the signed-in user can access."
"395dfec1-a0b9-465f-a783-8250a430cb8c","TeamsTab.ReadWriteSelfForUser","Allow the Teams app to manage only its own tabs for a user","Allows a Teams app to read, install, upgrade, and uninstall its own tabs for the signed-in user."
"5c469ce4-dab5-4afd-b9de-14f1ba4004a7","TeamsUserConfiguration.Read.All","Read Teams user configurations","Allows the app to read your tenant's user configurations on behalf of the signed-in admin user. User configuration may include attributes related to user, such as telephone number, assigned policies, etc."
"cd87405c-5792-4f15-92f7-debc0db6d1d6","TeamTemplates.Read","Read available Teams templates","Allows the app to read the available Teams templates, on behalf of the signed-in user."
"594f4bb6-c083-4cf9-8aa8-213823bdf351","Teamwork.Read.All","Read organizational teamwork settings","Allows the app to read the teamwork settings of the organization, on behalf of the signed-in user."
"44e060c4-bbdc-4256-a0b9-dcc0396db368","TeamworkAppSettings.Read.All","Read Teams app settings","Allows the app to read the Teams app settings on behalf of the signed-in user."
"87c556f0-2bd9-4eed-bd74-5dd8af6eaf7e","TeamworkAppSettings.ReadWrite.All","Read and write Teams app settings","Allows the app to read and write the Teams app settings on behalf of the signed-in user."
"b659488b-9d28-4208-b2be-1c6652b3c970","TeamworkDevice.Read.All","Read Teams devices","Allow the app to read the management data for Teams devices on behalf of the signed-in user."
"ddd97ecb-5c31-43db-a235-0ee20e635c40","TeamworkDevice.ReadWrite.All","Read and write Teams devices","Allow the app to read and write the management data for Teams devices on behalf of the signed-in user."
"57587d0b-8399-45be-b207-8050cec54575","TeamworkTag.Read","Read tags in Teams","Allows the app to read tags in Teams, on behalf of the signed-in user."
"539dabd7-b5b6-4117-b164-d60cd15a8671","TeamworkTag.ReadWrite","Read and write tags in Teams","Allows the app to read and write tags in Teams, on behalf of the signed-in user."
"b4d26916-07e0-4daf-9096-9f6d9174aa96","TeamworkUserInteraction.Read.All","Read all of the possible Teams interactions between the user and other users","Allows the app to read all of the possible Teams interactions between the signed-in user and other users"
"297f747b-0005-475b-8fef-c890f5152b38","TermStore.Read.All","Read term store data","Allows the app to read the term store data that the signed-in user has access to. This includes all sets, groups and terms in the term store."
"6c37c71d-f50f-4bff-8fd3-8a41da390140","TermStore.ReadWrite.All","Read and write term store data","Allows the app to read or modify data that the signed-in user has access to. This includes all sets, groups and terms in the term store."
"cac97e40-6730-457d-ad8d-4852fddab7ad","ThreatAssessment.ReadWrite.All","Read and write threat assessment requests","Allows an app to read your organization's threat assessment requests on behalf of the signed-in user. Also allows the app to create new requests to assess threats received by your organization on behalf of the signed-in user."
"b152eca8-ea73-4a48-8c98-1a6742673d99","ThreatHunting.Read.All","Run hunting queries","Allows the app to run hunting queries, on behalf of the signed-in user."
"9cc427b4-2004-41c5-aa22-757b755e9796","ThreatIndicators.Read.All","Read all threat indicators","Allows the app to read all the indicators for your organization, on behalf of the signed-in user."
"91e7d36d-022a-490f-a748-f8e011357b42","ThreatIndicators.ReadWrite.OwnedBy","Manage threat indicators this app creates or owns","Allows the app to create threat indicators, and fully manage those threat indicators (read, update and delete), on behalf of the signed-in user.  It cannot update any threat indicators it does not own."
"f266d9c0-ccb9-4fb8-a228-01ac0d8d6627","ThreatIntelligence.Read.All","Read all threat intelligence information","Allows the app to read threat intelligence information, such as indicators, observations, and articles, on behalf of the signed-in user."
"fd5353c6-26dd-449f-a565-c4e16b9fce78","ThreatSubmission.Read","Read threat submissions","Allows the app to read the threat submissions and threat submission policies owned by the signed-in user."
"7083913a-4966-44b6-9886-c5822a5fd910","ThreatSubmission.Read.All","Read all threat submissions","Allows the app to read your organization's threat submissions and threat submission policies on behalf of the signed-in user."
"68a3156e-46c9-443c-b85c-921397f082b5","ThreatSubmission.ReadWrite","Read and write threat submissions","Allows the app to read the threat submissions and threat submission policies owned by the signed-in user. Also allows the app to create new threat submissions on behalf of the signed-in user."
"8458e264-4eb9-4922-abe9-768d58f13c7f","ThreatSubmission.ReadWrite.All","Read and write all threat submissions","Allows the app to read your organization's threat submissions and threat submission policies on behalf of the signed-in user. Also allows the app to create new threat submissions on behalf of the signed-in user."
"059e5840-5353-4c68-b1da-666a033fc5e8","ThreatSubmissionPolicy.ReadWrite.All","Read and write all threat submission policies","Allows the app to read your organization's threat submission policies on behalf of the signed-in user. Also allows the app to create new threat submission policies on behalf of the signed-in user."
"79c4c76f-409a-4f98-884d-e2c09291ec26","Topic.Read.All","Read topic items","Allows the app to read topics data on behalf of the signed-in user."
"7ad34336-f5b1-44ce-8682-31d7dfcd9ab9","TrustFrameworkKeySet.Read.All","Read trust framework key sets","Allows the app to read trust framework key set properties on behalf of the signed-in user."
"39244520-1e7d-4b4a-aee0-57c65826e427","TrustFrameworkKeySet.ReadWrite.All","Read and write trust framework key sets","Allows the app to read and write trust framework key set properties on behalf of the signed-in user."
"73e75199-7c3e-41bb-9357-167164dbb415","UnifiedGroupMember.Read.AsGuest","Read unified group memberships as guest","Allows the app to read basic unified group properties, memberships and owners of the group the signed-in guest is a member of."
"550e695c-7511-40f4-ac79-e8fb9c82552d","User-ConvertToInternal.ReadWrite.All","Convert an external user to internal memeber user","Allow the app to convert an external user to an internal member user, on behalf of signed-in user."
"ed8d2a04-0374-41f1-aefe-da8ac87ccc87","User-LifeCycleInfo.Read.All","Read all users' lifecycle information","Allows the app to read the lifecycle information like employeeLeaveDateTime of users in your organization, on behalf of the signed-in user."
"7ee7473e-bd4b-4c9f-987c-bd58481f5fa2","User-LifeCycleInfo.ReadWrite.All","Read and write all users' lifecycle information","Allows the app to read and write the lifecycle information like employeeLeaveDateTime of users in your organization, on behalf of the signed-in user."
"f92e74e7-2563-467f-9dd0-902688cb5863","User.EnableDisableAccount.All","Enable and disable user accounts","Allows the app to enable and disable users' accounts, on behalf of the signed-in user."
"405a51b5-8d8d-430b-9842-8be4b0e9f324","User.Export.All","Export user's data","Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator)."
"63dd7cd9-b489-4adf-a28c-ac38b9a0f962","User.Invite.All","Invite guest users to the organization","Allows the app to invite guest users to the organization, on behalf of the signed-in user."
"637d7bec-b31e-4deb-acc9-24275642a2c9","User.ManageIdentities.All","Manage  user identities","Allows the app to read, update and delete identities that are associated with a user's account that the signed-in user has access to. This controls the identities users can sign-in with."
"e1fe6dd8-ba31-4d61-89e7-88639da4683d","User.Read","Sign in and read user profile","Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users."
"a154be20-db9c-4678-8ab7-66f6cc099a59","User.Read.All","Read all users' full profiles","Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user."
"b340eb25-3456-403f-be2f-af7a0d370277","User.ReadBasic.All","Read all users' basic profiles","Allows the app to read a basic set of profile properties of other users in your organization on behalf of the signed-in user. This includes display name, first and last name, email address and photo."
"b4e74841-8e56-480b-be8b-910348b18b4c","User.ReadWrite","Read and write access to user profile","Allows the app to read your profile. It also allows the app to update your profile information on your behalf."
"204e0828-b5ca-4ad8-b9f3-f32a958e7cc4","User.ReadWrite.All","Read and write all users' full profiles","Allows the app to read and write the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user."
"47607519-5fb1-47d9-99c7-da4b48f369b1","UserActivity.ReadWrite.CreatedByApp","Read and write app activity to users' activity feed","Allows the app to read and report the signed-in user's activity in the app."
"1f6b61c5-2f65-4135-9c9f-31c0f8d32b52","UserAuthenticationMethod.Read","Read user authentication methods.","Allows the app to read the signed-in user's authentication methods, including phone numbers and Authenticator app settings. This does not allow the app to see secret information like the signed-in user's passwords, or to sign-in  or otherwise use the signed-in user's authentication methods."
"aec28ec7-4d02-4e8c-b864-50163aea77eb","UserAuthenticationMethod.Read.All","Read all users' authentication methods","Allows the app to read authentication methods of all users in your organization that the signed-in user has access to. Authentication methods include things like a user’s phone numbers and Authenticator app settings. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods."
"48971fc1-70d7-4245-af77-0beb29b53ee2","UserAuthenticationMethod.ReadWrite","Read and write user authentication methods","Allows the app to read and write the signed-in user's authentication methods, including phone numbers and Authenticator app settings.                       This does not allow the app to see secret information like the signed-in user's passwords, or                      to sign-in or otherwise use the signed-in user's authentication methods.  "
"b7887744-6746-4312-813d-72daeaee7e2d","UserAuthenticationMethod.ReadWrite.All","Read and write all users' authentication methods."," Allows the app to read and write authentication methods of all users in your organization that the signed-in user has access to.                       Authentication methods include things like a user’s phone numbers and Authenticator app settings. This                      does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods."
"26e2f3e8-b2a1-47fc-9620-89bb5b042024","UserNotification.ReadWrite.CreatedByApp","Deliver and manage user's notifications","Allows the app to send, read, update and delete user’s notifications."
"834bcc1c-762f-41b0-bb91-1cdc323ee4bf","UserTeamwork.Read","Read user teamwork settings","Allows the app to read the teamwork settings of the signed-in user."
"367492fc-594d-4972-a9b5-0d58c622c91c","UserTimelineActivity.Write.CreatedByApp","Write app activity to users' timeline","Allows the app to report the signed-in user's app activity information to Microsoft Timeline."
"27470298-d3b8-4b9c-aad4-6334312a3eac","VirtualAppointment.Read","Read a user's virtual appointments","Allows an application to read virtual appointments for the signed-in user. Only an organizer or participant user can read their virtual appointments.  "
"2ccc2926-a528-4b17-b8bb-860eed29d64c","VirtualAppointment.ReadWrite","Read and write a user's virtual appointments  ","Allows an application to read and write virtual appointments for the signed-in user. Only an organizer or participant user can read and write their virtual appointments. "
"20d02fff-a0ef-49e7-a46e-019d4a6523b7","VirtualAppointmentNotification.Send","Send notification regarding virtual appointments for the signed-in user","Allows an application to send notifications for virtual appointments for the signed-in user."
"6b616635-ae58-433a-a918-8c45e4f304dc","VirtualEvent.Read","Read your virtual events","Allows the app to read virtual events created by the you"
"d38d189c-e29b-4344-8b3b-829bfa81380b","VirtualEvent.ReadWrite","Read and write your virtual events","Allows the app to read and write virtual events for you"
"11776c0c-6138-4db3-a668-ee621bea2555","WindowsUpdates.ReadWrite.All","Read and write all Windows update deployment settings","Allows the app to read and write all Windows update deployment settings for the organization on behalf of the signed-in user."
"f1ccd5a7-6383-466a-8db8-1a656f7d06fa","WorkforceIntegration.Read.All","Read workforce integrations","Allows the app to read workforce integrations, to synchronize data from Microsoft Teams Shifts, on behalf of the signed-in user."
"08c4b377-0d23-4a8b-be2a-23c1c1d88545","WorkforceIntegration.ReadWrite.All","Read and write workforce integrations","Allows the app to manage workforce integrations, to synchronize data from Microsoft Teams Shifts, on behalf of the signed-in user."