← cd ~/graph-permissions
// graph-permissions · profile
profileMicrosoft Graph permission · Low risk
Allows the app to see your users' basic profile (e.g., name, picture, user name, email address)
Delegated permission
Low riskView users' basic profile. Allows the app to see your users' basic profile (e.g., name, picture, user name, email address)
| ID | 14dad69e-099b-42c9-810b-d002981feec1 |
|---|---|
| Consent | Users can consent, if your consent settings allow it |
| Risk | Basic sign-in and profile information. |
Ask for it when signing in
Delegated permissions act as the signed-in user, so the app can never do more than that user can.
Connect-MgGraph -Scopes "profile"Which apps already have it?
# Apps with delegated consent for profile
Connect-MgGraph -Scopes "Application.Read.All", "Directory.Read.All"
$graph = Get-MgServicePrincipal -Filter "appId eq '00000003-0000-0000-c000-000000000000'"
Get-MgOauth2PermissionGrant -All |
Where-Object { $_.ResourceId -eq $graph.Id -and ($_.Scope -split " ") -contains "profile" } |
Select-Object ClientId, ConsentType, PrincipalId