Table of Contents

AgentCollection.Read.Global

Allows the app to read global collection and its membership in your organization's Agent Registry on behalf of the signed-in user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the AgentCollection.Read.Global permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category Application Delegated
Identifier - b14924c8-87f1-438a-81f2-dc370ba2f45d
DisplayText - Read global collection in Agent Registry
Description - Allows the app to read global collection and its membership in your organization's Agent Registry on behalf of the signed-in user.
AdminConsentRequired Yes Yes

Graph Methods

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: agentCollection

Property Type Description
createdBy String Object ID of the user or app that created the agent instance.
createdDateTime DateTimeOffset Timestamp when agent collection was created.
description String Description / purpose of the collection.
displayName String Friendly name of the collection.
id String Unique identifier for the collection. Key. Inherited from entity.
lastModifiedDateTime DateTimeOffset Timestamp of last update.
managedBy String appId (referred to as Application (client) ID on the Microsoft Entra admin center) of the service principal managing this agent.
originatingStore String Source system/store where the collection originated. For example Copilot Studio.
ownerIds String collection List of object IDs for the owners of the agent instance.