azure-msgraph-oauth2-permission-grant-scope
Delegated permission grants disclose consented scopes, target APIs, and principals.
Where it sits
| location | microsoft.graph.oAuth2PermissionGrant.{clientId,consentType,principalId,resourceId,scope} |
| location kind | policy_document |
| data kinds | sensitive_data |
| emits edge | ContainsSecret |
| service | Microsoft Graph (app permissions) (azure:msgraph) |
Collection recipe
| access mode | read_api |
| operation | GET /oauth2PermissionGrants |
| response path | value[] |
| encoding | json |
| params | {"tenant": "\u003ctenant-id\u003e"} |
Required permissions
DelegatedPermissionGrant.Read.All
References