Restricting the group.read.all permisson

Question

Hi,

A developer want to read data of certain groups from Azure ad for that he want's the group.read.all application permission but as an administrator I don't want to give this permission to him as this permission will not only expose the groups he want to read but also all the other groups in the ad.

Is their any way so customize the graph API permission so that he could only access the data of certain groups?
or any other suggestion is welcome.

Answer 1

Hello @Aman Jha Thank you for reaching out. To my knowledge, there isn't currently a way to restrict the permission to certain groups once the group.read.all permission is granted, would you consider filing a feature request on the M365 Developer platform so we can look into this?

Let me know whether this helps and if you have further questions,

Diana.