|
| 1 | +### Example 1: Find permissions related to a given domain |
| 2 | +```powershell |
| 3 | +PS C:\> Find-MgGraphPermission application |
| 4 | +PermissionType: Delegated |
| 5 | +
|
| 6 | +Id Consent Name Description |
| 7 | +-- ------- ---- ----------- |
| 8 | +c79f8feb-a9db-4090-85f9-90d820caa0eb Admin Application.Read.All Allows the app to read applications and service principals on behalf of the signed-in user. |
| 9 | +bdfbf15f-ee85-4955-8675-146e8e5296b5 Admin Application.ReadWrite.All Allows the app to create, read, update and delete applications and service principals on behalf of the signed-in user. Does not allow management of consent grants. |
| 10 | +b27add92-efb2-4f16-84f5-8108ba77985c Admin Policy.ReadWrite.ApplicationConfiguration Allows the app to read and write your organization's application configuration policies on behalf of the signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy. |
| 11 | +
|
| 12 | +
|
| 13 | + PermissionType: Application |
| 14 | +
|
| 15 | +Id Consent Name Description |
| 16 | +-- ------- ---- ----------- |
| 17 | +9a5d68dd-52b0-4cc2-bd40-abcf44ac3a30 Admin Application.Read.All Allows the app to read all applications and service principals without a signed-in user. |
| 18 | +1bfefb4e-e0b5-418b-a88f-73c46d2cc8e9 Admin Application.ReadWrite.All Allows the app to create, read, update and delete applications and service principals without a signed-in user. Does not allow management of consent grants. |
| 19 | +18a4783c-866b-4cc7-a460-3d5e5662c884 Admin Application.ReadWrite.OwnedBy Allows the app to create other applications, and fully manage those applications (read, update, update application secrets and delete), without a signed-in user. Â It cannot update any apps that it is not an owner of. |
| 20 | +be74164b-cff1-491c-8741-e671cb536e13 Admin Policy.ReadWrite.ApplicationConfiguration Allows the app to read and write your organization's application configuration policies, without a signed-in user. This includes policies such as activityBasedTimeoutPolicy, claimsMappingPolicy, homeRealmDiscoveryPolicy, tokenIssuancePolicy and tokenLifetimePolicy. |
| 21 | +``` |
| 22 | +Retrieves permissions related to a given domain. |
| 23 | + |
| 24 | +### Example 2: Find the identifier for a specific permission |
| 25 | +```powershell |
| 26 | +PS C:\> Find-MgGraphPermission application.Read | Format-List |
| 27 | +Id : c79f8feb-a9db-4090-85f9-90d820caa0eb |
| 28 | +PermissionType : Delegated |
| 29 | +Consent : Admin |
| 30 | +Name : Application.Read.All |
| 31 | +Description : Allows the app to read applications and service principals on behalf of the signed-in user. |
| 32 | +
|
| 33 | +Id : bdfbf15f-ee85-4955-8675-146e8e5296b5 |
| 34 | +PermissionType : Delegated |
| 35 | +Consent : Admin |
| 36 | +Name : Application.ReadWrite.All |
| 37 | +Description : Allows the app to create, read, update and delete applications and service principals on behalf of the signed-in user. Does not allow management of consent grants. |
| 38 | +
|
| 39 | +Id : 9a5d68dd-52b0-4cc2-bd40-abcf44ac3a30 |
| 40 | +PermissionType : Application |
| 41 | +Consent : Admin |
| 42 | +Name : Application.Read.All |
| 43 | +Description : Allows the app to read all applications and service principals without a signed-in user. |
| 44 | +``` |
| 45 | +Retrieves identifier for a specific permission. |
0 commit comments