← cd ~/graph-permissions
// graph-permissions · Device
Device.CreateFromOwnedTemplateMicrosoft Graph permission · Low risk
Allows the app to create device objects based on device templates owned by the signed-in user, on behalf of the signed in user.
Delegated permission
Low riskCreate devices based on owned device templates. Allows the app to create device objects based on device templates owned by the signed-in user, on behalf of the signed in user.
| ID | edc92e89-a987-48a9-911a-a7b1967dd7b1 |
|---|---|
| Consent | Needs admin consent |
| Risk | Read access, limited to what the signed-in user can see. |
Ask for it when signing in
Delegated permissions act as the signed-in user, so the app can never do more than that user can.
Connect-MgGraph -Scopes "Device.CreateFromOwnedTemplate"Which apps already have it?
# Apps with delegated consent for Device.CreateFromOwnedTemplate
Connect-MgGraph -Scopes "Application.Read.All", "Directory.Read.All"
$graph = Get-MgServicePrincipal -Filter "appId eq '00000003-0000-0000-c000-000000000000'"
Get-MgOauth2PermissionGrant -All |
Where-Object { $_.ResourceId -eq $graph.Id -and ($_.Scope -split " ") -contains "Device.CreateFromOwnedTemplate" } |
Select-Object ClientId, ConsentType, PrincipalId