← cd ~/graph-permissions
// graph-permissions · offline_access
offline_accessMicrosoft Graph permission · Low risk
Allows the app to see and update the data you gave it access to, even when users are not currently using the app. This does not give the app any additional permissions.
Delegated permission
Low riskMaintain access to data you have given it access to. Allows the app to see and update the data you gave it access to, even when users are not currently using the app. This does not give the app any additional permissions.
| ID | 7427e0e9-2fba-42fe-b0c0-848c9e6a8182 |
|---|---|
| Consent | Users can consent, if your consent settings allow it |
| Risk | Basic sign-in and profile information. |
Ask for it when signing in
Delegated permissions act as the signed-in user, so the app can never do more than that user can.
Connect-MgGraph -Scopes "offline_access"Which apps already have it?
# Apps with delegated consent for offline_access
Connect-MgGraph -Scopes "Application.Read.All", "Directory.Read.All"
$graph = Get-MgServicePrincipal -Filter "appId eq '00000003-0000-0000-c000-000000000000'"
Get-MgOauth2PermissionGrant -All |
Where-Object { $_.ResourceId -eq $graph.Id -and ($_.Scope -split " ") -contains "offline_access" } |
Select-Object ClientId, ConsentType, PrincipalId