Access without app permisions set

Question

Hi,

I am currently developing an app using the graph php SDK that accesses a logged in users calendar and as such I assumed that it would need the delegated permission calendar.read adding to my app registration in Azure, however even without this permission as long as I define calendar.read in the scope as the user logs in then it appear they are not needed.

Is this expected behaviour or might this change in the future?

Best

Will

Answer 1

Hello @William Thomas,

Thanks for reaching out!

For apps that run with a signed-in user, you can request delegated permissions in the scope parameter. These permissions delegate the privileges of the signed-in user to your app, allowing it to act as the signed-in user when making calls to Microsoft Graph.

Please refer the below document for more details:

https://learn.microsoft.com/en-us/graph/auth-v2-user#:~:text=Microsoft%20Graph%20exposes,and%20consent.

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.