More permissions on Graph Explorer than on Powershell

Question

When using Graph Explorer I am able to GET all groups in my organization, as well as GET all the role assignments. I, however, cannot do the same when using Powershell for the same purpose, as it says I have insufficient permissions. This seems inconsistent to me and I was wondering if I can anyhow accomplish the same level of privilege on Powershell.
When I check the permissions needed in Graph Explorer, all the permissions I have consented to are marked as AllPrincipal, if that makes my problem clearer?

Thanks in advance.

Answer 1

"AllPrincipal" means someone have granted admin consent, thus all users within your organization can use all the consented permissions for Graph Explorer. The Graph module for PowerShell is a separate app, thus has its own set of permissions, and likely no admin consent was granted, so you're seeing what your user permissions allow. You can use the Get-MgContext cmdlet to get a list of all permissions you currently have been granted against PowerShell:

Get-MgContext | select -ExpandProperty Scopes