question

KennyStern-7712 avatar image
0 Votes"
KennyStern-7712 asked KennyStern-7712 commented

How to revoke admin consent from Graph explorer

I granted admin consent to a Microsoft Graph permission that I would like to remove. Is there a way to do that? I don't want to delete the application or remove any of the other permissions. Just the one I mistakenly granted.
Thanks

microsoft-graph-identity
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

michev avatar image
0 Votes"
michev answered michev commented

Removing the app is the easiest/fastest way, re-consenting takes just a second. If you want to remove a specific permission only, you have to use the Remove-AzureADOAuth2PermissionGrant cmdlet against a given permission/scope, which you will need to enumerate first via Get-AzureADOAuth2PermissionGrant.

· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

How would I add Graph back to enterprise applications if I removed it?

0 Votes 0 ·

Sorry, I meant to say Graph Explorer. Thanks

0 Votes 0 ·

Simply open the tool again and login, it will ask for consent again. Might need to close the browser first or open a private session.

0 Votes 0 ·

Just so I'm clear, are you saying to delete the application entirely from Enterprise Applications, then go back to https://developer.microsoft.com/en-us/graph/graph-explorer and log in and it will add it back?
Also, maybe you can help with this as well..
The reason I'm in there is because I'm trying to access the profile card properties for the organization but I'm getting this error:

Forbidden - 403 - 317ms. You need to consent to the permissions on the Modify permissions (Preview) tab

 "error": {
     "code": "ErrorInsufficientPermissionsInAccessToken",
     "message": "Exception of type 'Microsoft.Fast.Profile.Core.Exception.ProfileAccessDeniedException' was thrown.",

Do you know what permission I need to grant?

Thanks a lot.

0 Votes 0 ·
Show more comments