CODEWITHSUNDEEP
microsoft-graph-apiazure-ad-graph-api
namrata
namrata

Reputation: 2545

Minimum set of permissions required for checkMemberGroups Graph API in Azure

What is the minimum set of permissions require in AAD App to access graph API -checkMemberGroups ?

Here are the list of permissions I tried with. Can this set be reduced any further? And am I missing any mandatory permissions?

Delegated Permissions -

Microsoft Graph API

Windows Azure Active Directory

Upvotes: 7

Views: 1252

Answers (3)

Sergey Kostrukov
Sergey Kostrukov

Reputation: 1151

After some experimentation, it seems that the minimum permissions are the following:

/me/checkMemberGroups

  • User.Read
  • GroupMember.Read.All

/users/{userId}/checkMemberGroups

  • User.ReadBasic.All
  • GroupMember.Read.All

Upvotes: 0

Fei Xue
Fei Xue

Reputation: 14649

If you were developing checkMemberGroups with Microsoft Graph, there is no need to config the corresponding permission for the Windows Azure Active Directory.

And to call the this API, if you have granted the User.Read.All, there is no need to grant other three permission. As the document mentioned that One of the scopes is required.

Upvotes: 2

Daniel Dobalian
Daniel Dobalian

Reputation: 3237

It depends on the type of data you want to get from Graph. If you just want to sign in the end user and get their basic profile info, you can simply set Sign in and read user profile.

Each scope relates to some data or endpoint you want to access. Figure out that list of data your scenario requires, then compare that with the scopes.

Upvotes: 0

Related Questions