Is it possible to remove some of the permissions from Graph Explorer

MKary 40 Reputation points
2023-04-05T10:34:14.44+00:00

Hi All,
Is it possible to remove permission one by one from Graph Explorer. I have read some articles, which tell us we can use PowerShell or completely remove this application from Azure https://learn.microsoft.com/en-us/answers/questions/348267/how-to-revoke-admin-consent-from-graph-explorer. But that will remove all permission, is there any easy way to remove some of the permissions from Graph Explorer.

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,813 questions
0 comments No comments
{count} votes

Accepted answer
  1. Vasil Michev 96,836 Reputation points MVP
    2023-04-05T10:42:06.1633333+00:00

    There is, but it's not a good one, because you need to grant some highly privileged permissions first:

    You require Directory.Read.All and DelegatedPermissionGrant.ReadWrite.All to be able to revoke consent to permissions

    If you are fine with doing so, you can then use the Unconsent button for every granted permission. User's image


1 additional answer

Sort by: Most helpful
  1. Anonymous
    2023-04-05T10:55:32.5766667+00:00

    Hi @MKary, Thanks for reaching out! As per my testing, please use below permission, "DelegatedPermissionGrant.ReadWrite.All" and "Directory.Read.All" to unconsent any specific permission from the Graph Explorer. DelegatedPermissionGrant.ReadWrite.All - Manage delegated permission grants which allows the app to manage delegated permission grants for any API (including Microsoft Graph), on behalf of the signed-in user.  User's image

      Hope this helps.  If the reply is helpful, please click "Accept Answer" and kindly upvote it. If you have additional questions about this answer, please click "Comment".