← cd ~/compare
// compare · graph permissions
Tasks.Read.All vs Tasks.ReadWrite.All
Two Microsoft Graph permissions that are easy to mix up, side by side.
In short: Tasks.Read.All only reads. Tasks.ReadWrite.All can also create, change or delete. Use the read-only one unless your app needs to write.
| Permission type | Tasks.Read.All | Tasks.ReadWrite.All |
|---|---|---|
| Application | Read all users’ tasks and tasklist Allows the app to read all users’ tasks and task lists in your organization, without a signed-in user. Always needs admin consent · Medium risk | Read and write all users’ tasks and tasklists Allows the app to create, read, update and delete all users’ tasks and task lists in your organization, without a signed-in user Always needs admin consent · High risk |
Spotted something out of date or wrong? Tell us and we'll fix it.