ApprovalSolution.ReadWrite

Allows the app to provision, read, create, and respond to approvals on behalf of the signed-in user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the ApprovalSolution.ReadWrite permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	-	6768d3af-4562-48ff-82d2-c5e19eb21b9c
DisplayText	-	Read, create, and respond to approvals
Description	-	Allows the app to provision, read, create, and respond to approvals on behalf of the signed-in user.
AdminConsentRequired	Yes	Yes

Graph Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	GET /solutions/approval
	GET /solutions/approval/approvalItems
	GET /solutions/approval/approvalItems/{approvalItemId}
	GET /solutions/approval/approvalItems/{approvalItemId}/requests
	GET /solutions/approval/approvalItems/{approvalItemId}/requests/{approvalItemRequestId}
	GET /solutions/approval/approvalItems/{approvalItemId}/responses
	GET /solutions/approval/approvalItems/{approvalItemId}/responses/{approvalItemResponseId}
	GET /solutions/approval/operations/{approvalOperationId}
	POST /solutions/approval/approvalItems
	POST /solutions/approval/approvalItems/{approvalItemId}/cancel
	POST /solutions/approval/approvalItems/{approvalItemId}/responses
	POST /solutions/approval/provision

	Commands
	New-MgBetaApproval
	Stop-MgBetaApprovalItem

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: approvalIdentitySet

Property	Type	Description
group	identity	The Microsoft Entra group associated with the approval item.
user	identity	The user associated with the approval item. Inherited from identitySet.

Graph reference: approvalItem

Property	Type	Description
allowCancel	Boolean	Indicates whether the approval item can be canceled.
allowEmailNotification	Boolean	Indicates whether email notification is enabled.
approvalType	approvalItemType	The workflow type of the approval item. The possible values are: `basic`, `basicAwaitAll`, `custom`, `customAwaitAll`. Required.
approvers	approvalIdentitySet collection	The identity of the principals to whom the approval item was initially assigned. Required.
completedDateTime	DateTimeOffset	Approval request completion date and time. Read-only.
createdDateTime	DateTimeOffset	Creation date and time of the approval request. Read-only.
description	String	The description of the approval request.
displayName	String	The displayName of the approval request. Required.
id	String	The unique id for the approval item. Read-only.
owner	approvalIdentitySet	The identity set of the principal who owns the approval item. Only provide a value for this property when creating an approval item on behalf of the principal. If the owner field isn't provided, the user information from the user context is used.
responsePrompts	String collection	Approval response prompts. Only provide a value for this property when creating a custom approval item. For custom approval items, supply two response prompt strings. The default response prompts are "Approve" and "Reject".
result	String	The result field is only populated once the approval item is in its final state. The result of the approval item is based on the approvalType. For basic approval items, the result is either "Approved" or "Rejected". For custom approval items, the result could either be a single response or multiple responses separated by a semi-colon. Read-only.
state	approvalItemState	The approval item state. The possible values are: `canceled`, `created`, `pending`, `completed`. Read-only.
viewPoint	approvalItemViewPoint	Represents user viewpoints data on the ApprovalItem. The data includes the users roles regarding the approval item. Read-only.

Graph reference: approvalItemRequest

Property	Type	Description
approver	approvalIdentitySet	The identity set of the principal assigned to this request.
createdDateTime	DateTimeOffset	Creation date and time for the request.
isReassigned	Boolean	Indicates whether a request was reassigned.
reassignedFrom	approvalIdentitySet	The identity set of the principal who reassigned the request.

Graph reference: approvalItemResponse

Property	Type	Description
comments	String	The comment made by the approver.
createdBy	approvalIdentitySet	The identity set of the approver.
createdDateTime	DateTimeOffset	Creation date and time of the response.
owners	approvalIdentitySet collection	The identity set of the principal who owns the approval item.
response	String	Approver response based on the response options. The default response options are "Approved" and "Rejected". The approval item creator can also define custom response options during approval item creation.

Graph reference: approvalOperation

Property	Type	Description
createdDateTime	DateTimeOffset	The date and time when the operation was created.
error	publicError	The error if the operation failed.
lastActionDateTime	DateTimeOffset	The date and time when this operation was most recently updated.
resourceLocation	String	The URL for the resource that was newly created or acted upon.
status	approvalOperationStatus	The status of the operation. The possible values are: `scheduled`, `inProgress`, `succeeded`, `failed`, `timeout`, `unknownFutureValue`.

Graph reference: approvalSolution

Property	Type	Description
provisioningStatus	provisionState	The approval provisioning status for a tenant on an environment. The possible values are: `notProvisioned`, `provisioningInProgress`, `provisioningFailed`, `provisioningCompleted`, `unknownFutureValue`.

Table of Contents

ApprovalSolution.ReadWrite

Graph Methods

Resources