← cd ~/graph-permissions
// graph-permissions · EduRoster
EduRoster.ReadMicrosoft Graph permission · Low risk
Allows the app to read the structure of schools and classes in an organization's roster and education-specific information about users to be read on behalf of the user.
Delegated permission
Low riskRead users' view of the roster. Allows the app to read the structure of schools and classes in an organization's roster and education-specific information about users to be read on behalf of the user.
| ID | a4389601-22d9-4096-ac18-36a927199112 |
|---|---|
| Consent | Needs admin consent |
| Risk | Read access, limited to what the signed-in user can see. |
Ask for it when signing in
Delegated permissions act as the signed-in user, so the app can never do more than that user can.
Connect-MgGraph -Scopes "EduRoster.Read"Which apps already have it?
# Apps with delegated consent for EduRoster.Read
Connect-MgGraph -Scopes "Application.Read.All", "Directory.Read.All"
$graph = Get-MgServicePrincipal -Filter "appId eq '00000003-0000-0000-c000-000000000000'"
Get-MgOauth2PermissionGrant -All |
Where-Object { $_.ResourceId -eq $graph.Id -and ($_.Scope -split " ") -contains "EduRoster.Read" } |
Select-Object ClientId, ConsentType, PrincipalId