← cd ~/graph-permissions
// graph-permissions · LifecyclePolicies-Guests
LifecyclePolicies-Guests.ReadWrite.AllMicrosoft Graph permission · High risk
Allows the app to create, update, and delete identity lifecycle policies for external guests on behalf of the signed-in user.
Delegated permission
High riskRead and write identity lifecycle policies for external guests. Allows the app to create, update, and delete identity lifecycle policies for external guests on behalf of the signed-in user.
| ID | d9ec82ed-63db-4905-b1b3-859b74d2bbf5 |
|---|---|
| Consent | Needs admin consent |
| Risk | Can change data across the whole tenant. |
Ask for it when signing in
Delegated permissions act as the signed-in user, so the app can never do more than that user can.
Connect-MgGraph -Scopes "LifecyclePolicies-Guests.ReadWrite.All"Which apps already have it?
# Apps with delegated consent for LifecyclePolicies-Guests.ReadWrite.All
Connect-MgGraph -Scopes "Application.Read.All", "Directory.Read.All"
$graph = Get-MgServicePrincipal -Filter "appId eq '00000003-0000-0000-c000-000000000000'"
Get-MgOauth2PermissionGrant -All |
Where-Object { $_.ResourceId -eq $graph.Id -and ($_.Scope -split " ") -contains "LifecyclePolicies-Guests.ReadWrite.All" } |
Select-Object ClientId, ConsentType, PrincipalId