Share via

About API Permission

Harry 20 Reputation points
2025-03-31T06:26:44.83+00:00

We had created an application by a Global admin account in AzureAD(Entra), and granted some API permission.

And now we want to remove the 'Global admin' role from this account, we'd like to know after that, if granted API permission will be impacted? Is the API permission related to the role of the account?

Thanks.

Microsoft Security | Microsoft Graph
0 comments
Accepted answer
  1. CarlZhao-MSFT 46,371 Reputation points
    2025-03-31T07:08:47.4233333+00:00

    Hi @Harry

    In Azure AD (Entra ID), API permissions are not directly related to the role of the account. API permissions are granted to the application itself, not to the specific user account's role. Therefore, even if you remove the "Global Administrator" role from the account, the API permissions already granted to the application will remain effective.

    However, it's important to note that granting or managing these API permissions typically requires administrative privileges. If you no longer have the "Global Administrator" role, you may need another administrator with the appropriate permissions to perform these actions.

    Hope this helps.

    If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.

    1 person found this answer helpful.
    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Harry 20 Reputation points
    2025-03-31T07:17:18.3566667+00:00

    Thanks for the answer, it's very clear.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.