question

AnwarMahmood-0381 avatar image
0 Votes"
AnwarMahmood-0381 asked azure-cxp-api edited

Azure Graph Explorer - Permissions

When I use https://developer.microsoft.com/en-us/graph/graph-explorer, then sign in to my tenancy, then try things that require permissions, I'm asked to grant consent. Even if I'm global administrator.

To what exactly am I granting access?

If I, as global administrator, grant "Graph Explorer" highly privileged permissions (imagine one called User.Delete.All), does that mean anyone - even a user in my tenancy with no role assigned were to sign in to 'Graph Explorer', would they 'inherit' permissions I have consented to 'Graph Explorer'?

I cannot use Graph Explorer with any confidence for anything non-trivial until I know this.

The level of
- circular references
- assumed knowledge
- inaccurate documentation
- incoherent documentation

...associated with Microsoft Graph at a new level, even for Microsoft.

azure-active-directorymicrosoft-graph-explorer
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Adding right tags/teams to assist.

0 Votes 0 ·

1 Answer

MarileeTurscak-MSFT avatar image
0 Votes"
MarileeTurscak-MSFT answered

The consent prompt itself should provide the list of what you are granting consent to.

83461-grantconsent.jpg


grantconsent.jpg (97.6 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.