azureblog.co.uk
← cd ~/compare
// compare · graph permissions

Bookings.Read.All vs Bookings.ReadWrite.All

Two Microsoft Graph permissions that are easy to mix up, side by side.

In short: Bookings.Read.All only reads. Bookings.ReadWrite.All can also create, change or delete. Use the read-only one unless your app needs to write.

Permission typeBookings.Read.AllBookings.ReadWrite.All
ApplicationRead all Bookings related resources.
Allows an app to read Bookings appointments, businesses, customers, services, and staff without a signed-in user.
Always needs admin consent · Medium risk
Read and write bookings information
Allows an app to read and write bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user. Does not allow create, delete and publish of booking businesses.
Always needs admin consent · High risk
DelegatedRead bookings information
Allows an app to read bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user.
Users can consent · Low risk
Read and write bookings information
Allows an app to read and write bookings appointments, businesses, customers, services, and staff on behalf of the signed-in user. Does not allow create, delete and publish of booking businesses.
Users can consent · High risk

Spotted something out of date or wrong? Tell us and we'll fix it.