← cd ~/graph-permissions
// graph-permissions · Mail
Mail.ReadWrite.SharedMicrosoft Graph permission · Medium risk
Allows the app to create, read, update, and delete mail a user has permission to access, including their own and shared mail. Does not include permission to send mail.
Delegated permission
Medium riskRead and write user and shared mail. Allows the app to create, read, update, and delete mail a user has permission to access, including their own and shared mail. Does not include permission to send mail.
| ID | 5df07973-7d5d-46ed-9847-1271055cbd51 |
|---|---|
| Consent | Users can consent, if your consent settings allow it |
| Risk | Reads or changes the signed-in user's content, limited to what that user can access. |
Ask for it when signing in
Delegated permissions act as the signed-in user, so the app can never do more than that user can.
Connect-MgGraph -Scopes "Mail.ReadWrite.Shared"Which apps already have it?
# Apps with delegated consent for Mail.ReadWrite.Shared
Connect-MgGraph -Scopes "Application.Read.All", "Directory.Read.All"
$graph = Get-MgServicePrincipal -Filter "appId eq '00000003-0000-0000-c000-000000000000'"
Get-MgOauth2PermissionGrant -All |
Where-Object { $_.ResourceId -eq $graph.Id -and ($_.Scope -split " ") -contains "Mail.ReadWrite.Shared" } |
Select-Object ClientId, ConsentType, PrincipalId