When I use https://developer.microsoft.com/en-us/graph/graph-explorer, then sign in to my tenancy, then try things that require permissions, I'm asked to grant consent. Even if I'm global administrator.
To what exactly am I granting access?
If I, as global administrator, grant "Graph Explorer" highly privileged permissions (imagine one called User.Delete.All), does that mean anyone - even a user in my tenancy with no role assigned were to sign in to 'Graph Explorer', would they 'inherit' permissions I have consented to 'Graph Explorer'?
I cannot use Graph Explorer with any confidence for anything non-trivial until I know this.
The level of
- circular references
- assumed knowledge
- inaccurate documentation
- incoherent documentation
...associated with Microsoft Graph at a new level, even for Microsoft.