Azure Graph Explorer - Permissions

Anwar Mahmood 6 Reputation points
2021-03-25T19:11:30.543+00:00

When I use https://developer.microsoft.com/en-us/graph/graph-explorer, then sign in to my tenancy, then try things that require permissions, I'm asked to grant consent. Even if I'm global administrator.

To what exactly am I granting access?

If I, as global administrator, grant "Graph Explorer" highly privileged permissions (imagine one called User.Delete.All), does that mean anyone - even a user in my tenancy with no role assigned were to sign in to 'Graph Explorer', would they 'inherit' permissions I have consented to 'Graph Explorer'?

I cannot use Graph Explorer with any confidence for anything non-trivial until I know this.

The level of

  • circular references
  • assumed knowledge
  • inaccurate documentation
  • incoherent documentation

...associated with Microsoft Graph at a new level, even for Microsoft.

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,592 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,473 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Marilee Turscak-MSFT 33,801 Reputation points Microsoft Employee
    2021-03-31T23:43:03.817+00:00

    The consent prompt itself should provide the list of what you are granting consent to.

    83461-grantconsent.jpg

    0 comments No comments