AgentCollection.ReadWrite.ManagedBy
Allows the app to create, read, update, and delete collections that designate the calling app as their manager and manage their membership in your organization's Agent Registry without a signed-in user.
Merill's Note
For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the
AgentCollection.ReadWrite.ManagedBypermission.If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the
Export-MsIdAppConsentGrantReportcommand. See How To: Run a quick OAuth app audit of your tenant
| Category | Application | Delegated |
|---|---|---|
| Identifier | 2e0fb698-9996-479f-926b-ce63f4397829 | - |
| DisplayText | Read and write managed-by collections in Agent Registry | - |
| Description | Allows the app to create, read, update, and delete collections that designate the calling app as their manager and manage their membership in your organization's Agent Registry without a signed-in user. | - |
| AdminConsentRequired | - | - |
Graph Methods
→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)
| Methods |
|---|
Resources
Granting this permission allows the calling application to access (and/or update) the following information in your tenant.
Graph reference: agentCollection
| Property | Type | Description |
|---|---|---|
| createdBy | String | Object ID of the user or app that created the agent instance. |
| createdDateTime | DateTimeOffset | Timestamp when agent collection was created. |
| description | String | Description / purpose of the collection. |
| displayName | String | Friendly name of the collection. |
| id | String | Unique identifier for the collection. Key. Inherited from entity. |
| lastModifiedDateTime | DateTimeOffset | Timestamp of last update. |
| managedBy | String | appId (referred to as Application (client) ID on the Microsoft Entra admin center) of the service principal managing this agent. |
| originatingStore | String | Source system/store where the collection originated. For example Copilot Studio. |
| ownerIds | String collection | List of object IDs for the owners of the agent instance. |