azureblog.co.uk
← cd ~/graph-permissions
// graph-permissions · PrinterShare

PrinterShare.ReadBasic.AllMicrosoft Graph permission · Low risk

Allows the application to read basic information about printer shares on behalf of the signed-in user. Does not allow reading access control information.

Delegated permission

Low risk

Read basic information about printer shares. Allows the application to read basic information about printer shares on behalf of the signed-in user. Does not allow reading access control information.

ID5fa075e9-b951-4165-947b-c63396ff0a37
ConsentUsers can consent, if your consent settings allow it
RiskRead access, limited to what the signed-in user can see.

Ask for it when signing in

Delegated permissions act as the signed-in user, so the app can never do more than that user can.

powershell1 line
Connect-MgGraph -Scopes "PrinterShare.ReadBasic.All"

Which apps already have it?

powershell6 lines
# Apps with delegated consent for PrinterShare.ReadBasic.All
Connect-MgGraph -Scopes "Application.Read.All", "Directory.Read.All"
$graph = Get-MgServicePrincipal -Filter "appId eq '00000003-0000-0000-c000-000000000000'"
Get-MgOauth2PermissionGrant -All |
    Where-Object { $_.ResourceId -eq $graph.Id -and ($_.Scope -split " ") -contains "PrinterShare.ReadBasic.All" } |
    Select-Object ClientId, ConsentType, PrincipalId

Other PrinterShare permissions

Check every app in your tenant → Permission explainer