Device Permissions for Microsoft Graph
Application
Permission | ID | Purpose | Description |
---|---|---|---|
Device.Read.All | 7438b122-aefc-4978-80ed-43db9fcc7715 | Read all devices | Allows the app to read your organization’s devices’ configuration information without a signed-in user. |
Device.ReadWrite.All | 1138cb37-bd11-4084-a2b7-9f71582aeddb | Read and write devices | Allows the app to read and write all device properties without a signed in user. Does not allow device creation, device deletion or update of device alternative security identifiers. |
Delegated
Permission | ID | Purpose | Description |
---|---|---|---|
Device.Command | bac3b9c2-b516-4ef4-bd3b-c2ef73d8d804 | Communicate with user devices | Allows the app to launch another app or communicate with another app on a user’s device on behalf of the signed-in user. |
Device.Read | 11d4cd79-5ba5-460f-803f-e22c8ab85ccd | Read user devices | Allows the app to read a user’s list of devices on behalf of the signed-in user. |
Device.Read.All | 951183d1-1a61-466f-a6d1-1fde911bfd95 | Read all devices | Allows the app to read your organization’s devices’ configuration information on behalf of the signed-in user. |