Azure Graph Explorer - Permissions

Anwar Mahmood 16 Reputation points
2021-03-25T19:11:30.543+00:00

When I use https://developer.microsoft.com/en-us/graph/graph-explorer, then sign in to my tenancy, then try things that require permissions, I'm asked to grant consent. Even if I'm global administrator.

To what exactly am I granting access?

If I, as global administrator, grant "Graph Explorer" highly privileged permissions (imagine one called User.Delete.All), does that mean anyone - even a user in my tenancy with no role assigned were to sign in to 'Graph Explorer', would they 'inherit' permissions I have consented to 'Graph Explorer'?

I cannot use Graph Explorer with any confidence for anything non-trivial until I know this.

The level of

  • circular references
  • assumed knowledge
  • inaccurate documentation
  • incoherent documentation

...associated with Microsoft Graph at a new level, even for Microsoft.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Security | Microsoft Graph
{count} votes

1 answer

Sort by: Most helpful
  1. Marilee Turscak-MSFT 37,206 Reputation points Microsoft Employee Moderator
    2021-03-31T23:43:03.817+00:00

    The consent prompt itself should provide the list of what you are granting consent to.

    83461-grantconsent.jpg

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.