List excludes collection of permissionGrantPolicy
Namespace: microsoft.graph
Retrieve the condition sets which are excluded in a permissionGrantPolicy.
Permissions
One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.
Permission type | Permissions (from least to most privileged) |
---|---|
Delegated (work or school account) | Policy.Read.PermissionGrant, Directory.Read.All |
Delegated (personal Microsoft account) | Not supported. |
Application | Policy.Read.PermissionGrant, Directory.Read.All |
HTTP request
GET /policies/permissionGrantPolicies/{id}/excludes
Optional query parameters
This method supports the OData query parameters to help customize the response.
Request headers
Name | Description |
---|---|
Authorization | Bearer {token}. Required. |
Request body
Do not supply a request body for this method.
Response
If successful, this method returns a 200 OK
response code and a collection of permissionGrantConditionSet objects in the response body.
Example
Request
The following is an example of the request to retrieve the excludes condition sets of the built-in permission grant policy microsoft-application-admin
. This permission grant policy includes all delegated permissions, and all application permissions excluding application permissions for Microsoft Graph and application permissions for Azure Active Directory Graph.
GET https://graph.microsoft.com/v1.0/policies/permissionGrantPolicies/microsoft-application-admin/excludes
Response
The following is an example of the response.
Note: The response object shown here might be shortened for readability.
HTTP/1.1 200 OK
Content-type: application/json
{
"value": [
{
"id": "c85b029f-4abf-47d8-ae61-d2a38299033a",
"permissionClassification": "all",
"permissionType": "application",
"resourceApplication": "00000003-0000-0000-c000-000000000000",
"permissions": [ "all" ],
"clientApplicationIds": [ "all" ],
"clientApplicationTenantIds": [ "all" ],
"clientApplicationPublisherIds": [ "all" ],
"clientApplicationsFromVerifiedPublisherOnly": false
},
{
"id": "2a1fbb36-9d9a-42d8-8804-de2aa45aca80",
"permissionClassification": "all",
"permissionType": "application",
"resourceApplication": "00000002-0000-0000-c000-000000000000",
"permissions": [ "all" ],
"clientApplicationIds": [ "all" ],
"clientApplicationTenantIds": [ "all" ],
"clientApplicationPublisherIds": [ "all" ],
"clientApplicationsFromVerifiedPublisherOnly": false
}
]
}
Feedback
Submit and view feedback for