MSGraphPermissions - Revision history

Cna@inlogic.dk: /* Password Administrator */

2025-05-06T09:27:38Z

Password Administrator

← Older revision		Revision as of 09:27, 6 May 2025
Line 250:		Line 250:

	===Password Sync===		===Password Sync===
	Go to "Microsoft Entra ID" -> "Roles and Administrators"		Go to "Microsoft Entra ID" -> "Roles and Administrators" (Note that this is not a graph permission.)

	~~Note~~ that ~~this~~ is ~~not a graph permission~~.		Select the Graph API that is entered into the Office365 tenant setting and add the role.
	{\| class="wikitable"		{\| class="wikitable"
	\|+		\|+

2025-04-09T11:46:39Z

Microsoft Graph

← Older revision		Revision as of 11:46, 9 April 2025
Line 116:		Line 116:
	!Used for		!Used for
	!Used by		!Used by
	\|-
	~~\|Mail.Send~~
	~~\|Application~~
	~~\|Microsoft Graph~~
	~~\|Send mail from UMS programs~~
	~~\|All programs if selected under mail accounts~~
	\|-		\|-
	\|User.ReadWrite.All		\|User.ReadWrite.All

2025-02-17T11:59:44Z

Add SharePoint App permissions

← Older revision		Revision as of 11:59, 17 February 2025
Line 76:		Line 76:
	*Go to https://'''<tenantname>'''-admin.sharepoint.com/_layouts/15/appinv.aspx		*Go to https://'''<tenantname>'''-admin.sharepoint.com/_layouts/15/appinv.aspx
	*Enter app Id (AKA Client Id) and press lookup.		*Enter app Id (AKA Client Id) and press lookup.
	*In App Domain enter: www.localhost.com		*In App Domain enter:
	*In Redirect URL enter: https://localhost		www.localhost.com
			*In Redirect URL enter:
			https://localhost
	*Copy paste the below text in Permission Request XML and save		*Copy paste the below text in Permission Request XML and save

2025-02-17T11:57:44Z

Add SharePoint App permissions

← Older revision		Revision as of 11:57, 17 February 2025
Line 85:		Line 85:
	</AppPermissionRequests>		</AppPermissionRequests>

	[[File:SharePoint Organization Settings App permission.jpg\|none~~\|thumb\|389x389px~~\|Enter anything you like into Title]]		[[File:SharePoint Organization Settings App permission.jpg\|none\|Enter anything you like into Title\|frame]]

	====Open newest installed Powershell on the server running the program====		====Open newest installed Powershell on the server running the program====

2025-02-17T11:55:46Z

Add SharePoint App permissions

← Older revision		Revision as of 11:55, 17 February 2025
Line 76:		Line 76:
	*Go to https://'''<tenantname>'''-admin.sharepoint.com/_layouts/15/appinv.aspx		*Go to https://'''<tenantname>'''-admin.sharepoint.com/_layouts/15/appinv.aspx
	*Enter app Id (AKA Client Id) and press lookup.		*Enter app Id (AKA Client Id) and press lookup.
			*In App Domain enter: www.localhost.com
			*In Redirect URL enter: https://localhost
	*Copy paste the below text in Permission Request XML and save		*Copy paste the below text in Permission Request XML and save

2024-11-05T08:32:56Z

Microsoft Graph

← Older revision		Revision as of 08:32, 5 November 2024
Line 168:		Line 168:
	\|Used when sending mail from All UMS programs. If this is selected under service accounts and mail accounts		\|Used when sending mail from All UMS programs. If this is selected under service accounts and mail accounts
	\|		\|
			\|-
			\|User.EnableDisableAccount.All
			\|Application
			\|Microsoft Graph
			\|Used for enabling and disabling users. Only applicable if not using Azure/Entra AD Sync
			\|Live_at_edu.exe
	\|}		\|}

Line 314:		Line 320:
	==FAQ :==		==FAQ :==
	If you get this message when trying to reset password in Office365 using MS Graph Api. This is because user is global Admin and therefore MS graph can not Reset password		If you get this message when trying to reset password in Office365 using MS Graph Api. This is because user is global Admin and therefore MS graph can not Reset password
	[[File:Passwordsync.png\|none\|thumb\|1245x1245px]]		[[File:Passwordsync.png\|none\|thumb\|1245x1245px]]The error message below, could indicate a user has roles in Azure/Entra meaning Graph cannot disable them, if the error still persists after removing all roles, it may be the result of Graph not having sufficient permissions, please make sure Graph has the User.EnableDisableAccount.All permission.

			(DisableUsers) Error. Could not disable user - User - The user could have roles that does not allow this action. Insufficient privileges to complete the operation.

2024-10-22T09:12:38Z

Password Sync

← Older revision		Revision as of 09:12, 22 October 2024
Line 246:		Line 246:

	===Password Sync===		===Password Sync===
	~~Note that this is a~~ " ~~administrator role~~" and ~~not a permission per se.~~		Go to "Microsoft Entra ID" -> "Roles and Administrators"

	~~Go to "Roles and Administrators"~~		Note that this is not a graph permission.
	{\| class="wikitable"		{\| class="wikitable"
	\|+		\|+
Line 257:		Line 257:
	!Used by		!Used by
	\|-		\|-
	\|~~Reset~~ Password		\|Password Administrator
	\|~~Application~~		\|ServicePrincipal
	\|Microsoft Graph		\|Microsoft Graph
	\|Reset password for Users		\|Reset password for Users

2024-10-22T09:09:53Z

Password Sync

← Older revision		Revision as of 09:09, 22 October 2024
Line 247:		Line 247:
	===Password Sync===		===Password Sync===
	Note that this is a " administrator role" and not a permission per se.		Note that this is a " administrator role" and not a permission per se.

			Go to "Roles and Administrators"
	{\| class="wikitable"		{\| class="wikitable"
	\|+		\|+
	!~~Permission name~~		!Rolename
	!Permission type		!Permission type
	!API		!API
Line 255:		Line 257:
	!Used by		!Used by
	\|-		\|-
	\|~~Roles and Administrators~~		\|Reset Password
	\|Application		\|Application
	\|Microsoft Graph		\|Microsoft Graph

2024-09-12T12:37:21Z

Microsoft Graph

← Older revision		Revision as of 12:37, 12 September 2024
Line 112:		Line 112:
	!Used for		!Used for
	!Used by		!Used by
			\|-
			\|Mail.Send
			\|Application
			\|Microsoft Graph
			\|Send mail from UMS programs
			\|All programs if selected under mail accounts
	\|-		\|-
	\|User.ReadWrite.All		\|User.ReadWrite.All

2024-09-02T11:34:12Z

OneNote

← Older revision		Revision as of 11:34, 2 September 2024
Line 156:		Line 156:
	\|Used to provision OneDrive for users		\|Used to provision OneDrive for users
	\|Live_at_edu.exe		\|Live_at_edu.exe
			\|-
			\|Mail.Send
			\|Application
			\|Microsoft Graph
			\|Used when sending mail from All UMS programs. If this is selected under service accounts and mail accounts
			\|
	\|}		\|}