azureblog.co.uk
← cd ~/graph-permissions
// graph-permissions · EduAdministration

EduAdministration.ReadMicrosoft Graph permission · Low risk

Read the state and settings of all Microsoft education apps on behalf of the user.

Delegated permission

Low risk

Read education app settings. Read the state and settings of all Microsoft education apps on behalf of the user.

ID8523895c-6081-45bf-8a5d-f062a2f12c9f
ConsentNeeds admin consent
RiskRead access, limited to what the signed-in user can see.

Ask for it when signing in

Delegated permissions act as the signed-in user, so the app can never do more than that user can.

powershell1 line
Connect-MgGraph -Scopes "EduAdministration.Read"

Which apps already have it?

powershell6 lines
# Apps with delegated consent for EduAdministration.Read
Connect-MgGraph -Scopes "Application.Read.All", "Directory.Read.All"
$graph = Get-MgServicePrincipal -Filter "appId eq '00000003-0000-0000-c000-000000000000'"
Get-MgOauth2PermissionGrant -All |
    Where-Object { $_.ResourceId -eq $graph.Id -and ($_.Scope -split " ") -contains "EduAdministration.Read" } |
    Select-Object ClientId, ConsentType, PrincipalId

Other EduAdministration permissions

Check every app in your tenant → Permission explainer

Sources