Edit

Get-SPOTenantServicePrincipalPermissionGrants

  • Reference
Module:
Microsoft.Online.SharePoint.PowerShell
Applies to:
SharePoint Online

Gets the collection of permission grants for the "SharePoint Online Client" service principal

Syntax

Get-SPOTenantServicePrincipalPermissionGrants

Description

Gets the collection of permission grants for the "SharePoint Online Client" service principal.

A permission grant contains the following properties:

  • ClientId: The objectId of the service principal granted consent to impersonate the user when accessing the resource (represented by the resourceId).

  • ConsentType: Whether consent was provided by the administrator on behalf of the organization or whether consent was provided by an individual. The possible values are "AllPrincipals" or "Principal".

  • ObjectId: The unique identifier for the permission grant.

  • (Coming soon) Resource: The resource to which access has been granted.

  • ResourceId: The objectId of the resource service principal to which access has been granted.

  • Scope: The value of the scope claim that the resource application should expect in the OAuth 2.0 access token.

Examples

------------------EXAMPLE 1------------------

Get-SPOTenantServicePrincipalPermissionGrants

Gets the collection of permission grants for the "SharePoint Online Client" service principal.