APIConnectors.ReadWrite.All

Allows the app to read, create and manage the API connectors used in user authentication flows, on behalf of the signed-in user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the APIConnectors.ReadWrite.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	1dfe531a-24a6-4f1b-80f4-7a0dc5a0a171	c67b52c5-7c69-48b6-9d48-7b3af3ded914
DisplayText	Read and write API connectors for authentication flows	Read and write API connectors for authentication flows
Description	Allows the app to read, create and manage the API connectors used in user authentication flows, without a signed-in user.	Allows the app to read, create and manage the API connectors used in user authentication flows, on behalf of the signed-in user.
AdminConsentRequired	Yes	Yes

Graph Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	DELETE /identity/apiConnectors/{identityApiConnectorId}
	GET /identity/apiConnectors/
	GET /identity/apiConnectors/{identityApiConnectorId}
	PATCH /identity/apiConnectors/{identityApiConnectorId}
	POST /identity/apiConnectors
	POST /identity/apiconnectors/{id}/uploadClientCertificate

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	DELETE /identity/apiConnectors/{identityApiConnectorId}
	GET /identity/apiConnectors/
	GET /identity/apiConnectors/{identityApiConnectorId}
	PATCH /identity/apiConnectors/{identityApiConnectorId}
	POST /identity/apiConnectors
	POST /identity/apiconnectors/{id}/uploadClientCertificate

→ Command supports delegated access (access on behalf of a user)
→ Command supports app-only access (access without a user)

	Commands
	Get-MgIdentityApiConnector
	Invoke-MgUploadIdentityApiConnectorClientCertificate
	New-MgIdentityApiConnector
	Remove-MgIdentityApiConnector
	Update-MgIdentityApiConnector

→ Command supports delegated access (access on behalf of a user)
→ Command supports app-only access (access without a user)

	Commands
	Get-MgBetaIdentityApiConnector
	Invoke-MgBetaUploadIdentityApiConnectorClientCertificate
	New-MgBetaIdentityApiConnector
	Remove-MgBetaIdentityApiConnector
	Update-MgBetaIdentityApiConnector

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: apiAuthenticationConfigurationBase

Property	Type	Description

Property	Type	Description
password	String	The password. It isn't returned in the responses.
username	String	The username.

Graph reference: clientCertificateAuthentication

Property	Type	Description
certificateList	pkcs12CertificateInformation collection	The list of certificates uploaded for this API connector.

Graph reference: identityApiConnector

Property	Type	Description
authenticationConfiguration	apiAuthenticationConfigurationBase	The object which describes the authentication configuration details for calling the API. Basic and PKCS 12 client certificate are supported.
displayName	String	The name of the API connector.
id	String	The randomly generated identifier of the API connector.
targetUrl	String	The URL of the API endpoint to call.

Graph reference: pkcs12Certificate

Property	Type	Description
password	String	The password for the pfx file. Required. If no password is used, you must still provide a value of `""`.
pkcs12Value	String	Represents the pfx content that is sent. The value should be a base-64 encoded version of the actual certificate content. Required.

Table of Contents

APIConnectors.ReadWrite.All

Graph Methods

Resources