← cd ~/graph-permissions
// graph-permissions · Mail
Mail.ReadBasic.SharedMicrosoft Graph permission · Medium risk
Allows the app to read mail the signed-in user can access, including their own and shared mail, except for body, bodyPreview, uniqueBody, attachments, extensions, and any extended properties.
Delegated permission
Medium riskRead user and shared basic mail. Allows the app to read mail the signed-in user can access, including their own and shared mail, except for body, bodyPreview, uniqueBody, attachments, extensions, and any extended properties.
| ID | b11fa0e7-fdb7-4dc9-b1f1-59facd463480 |
|---|---|
| Consent | Users can consent, if your consent settings allow it |
| Risk | Reads or changes the signed-in user's content, limited to what that user can access. |
Ask for it when signing in
Delegated permissions act as the signed-in user, so the app can never do more than that user can.
Connect-MgGraph -Scopes "Mail.ReadBasic.Shared"Which apps already have it?
# Apps with delegated consent for Mail.ReadBasic.Shared
Connect-MgGraph -Scopes "Application.Read.All", "Directory.Read.All"
$graph = Get-MgServicePrincipal -Filter "appId eq '00000003-0000-0000-c000-000000000000'"
Get-MgOauth2PermissionGrant -All |
Where-Object { $_.ResourceId -eq $graph.Id -and ($_.Scope -split " ") -contains "Mail.ReadBasic.Shared" } |
Select-Object ClientId, ConsentType, PrincipalId