This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 66%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKS%3C/text%3E%3C/svg%3E)
I granted admin consent to a Microsoft Graph permission that I would like to remove. Is there a way to do that? I don't want to delete the application or remove any of the other permissions. Just the one I mistakenly granted.
Thanks
Removing the app is the easiest/fastest way, re-consenting takes just a second. If you want to remove a specific permission only, you have to use the Remove-AzureADOAuth2PermissionGrant cmdlet against a given permission/scope, which you will need to enumerate first via Get-AzureADOAuth2PermissionGrant.
How would I add Graph back to enterprise applications if I removed it?
Sorry, I meant to say Graph Explorer. Thanks
Simply open the tool again and login, it will ask for consent again. Might need to close the browser first or open a private session.
Just so I'm clear, are you saying to delete the application entirely from Enterprise Applications, then go back to https://developer.microsoft.com/en-us/graph/graph-explorer and log in and it will add it back?
Also, maybe you can help with this as well..
The reason I'm in there is because I'm trying to access the profile card properties for the organization but I'm getting this error:
Forbidden - 403 - 317ms. You need to consent to the permissions on the Modify permissions (Preview) tab
"error": {
"code": "ErrorInsufficientPermissionsInAccessToken",
"message": "Exception of type 'Microsoft.Fast.Profile.Core.Exception.ProfileAccessDeniedException' was thrown.",
Do you know what permission I need to grant?
Thanks a lot.
The needed Permissions are usually shown when you hit the Modify Permissions tab (right below the box where you enter the request). If they are not listed there, you can also add them from the settings (click the Gear button next to your profile on the left, Select permissions).
You cannot add permissions directly from the Azure AD blade, you need to use the Consent process, and hitting the button above triggers that.