← cd ~/graph-permissions
// graph-permissions · openid
openidMicrosoft Graph permission · Low risk
Allows users to sign in to the app with their work or school accounts and allows the app to see basic user profile information.
Delegated permission
Low riskSign users in. Allows users to sign in to the app with their work or school accounts and allows the app to see basic user profile information.
| ID | 37f7f235-527c-4136-accd-4a02d197296e |
|---|---|
| Consent | Users can consent, if your consent settings allow it |
| Risk | Basic sign-in and profile information. |
Ask for it when signing in
Delegated permissions act as the signed-in user, so the app can never do more than that user can.
Connect-MgGraph -Scopes "openid"Which apps already have it?
# Apps with delegated consent for openid
Connect-MgGraph -Scopes "Application.Read.All", "Directory.Read.All"
$graph = Get-MgServicePrincipal -Filter "appId eq '00000003-0000-0000-c000-000000000000'"
Get-MgOauth2PermissionGrant -All |
Where-Object { $_.ResourceId -eq $graph.Id -and ($_.Scope -split " ") -contains "openid" } |
Select-Object ClientId, ConsentType, PrincipalId