CrossTenantInformation.ReadBasic.All

Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem on behalf of the signed-in user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the CrossTenantInformation.ReadBasic.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	cac88765-0581-4025-9725-5ebc13f729ee	81594d25-e88e-49cf-ac8c-fecbff49f994
DisplayText	Read cross-tenant basic information	Read cross-tenant basic information
Description	Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem without a signed-in user.	Allows the application to obtain basic tenant information about another target tenant within the Azure AD ecosystem on behalf of the signed-in user.
AdminConsentRequired	Yes	Yes

Graph Methods

• API [v1.0]
• API [beta]
• PowerShell [v1.0]
• PowerShell [beta]

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	GET /tenantRelationships/findTenantInformationByDomainName(domainName='{id}')
	GET /tenantRelationships/findTenantInformationByTenantId(tenantId='{id}')

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

• crossTenantAccessPolicyConfigurationPartner
• tenantInformation

Graph reference: crossTenantAccessPolicyConfigurationPartner

Property	Type	Description
automaticUserConsentSettings	inboundOutboundPolicyConfiguration	Determines the partner-specific configuration for automatic user consent settings. Unless specifically configured, the inboundAllowed and outboundAllowed properties are null and inherit from the default settings, which is always false.
b2bCollaborationInbound	crossTenantAccessPolicyB2BSetting	Defines your partner-specific configuration for users from other organizations accessing your resources via Microsoft Entra B2B collaboration.
b2bCollaborationOutbound	crossTenantAccessPolicyB2BSetting	Defines your partner-specific configuration for users in your organization going outbound to access resources in another organization via Microsoft Entra B2B collaboration.
b2bDirectConnectInbound	crossTenantAccessPolicyB2BSetting	Defines your partner-specific configuration for users from other organizations accessing your resources via Azure B2B direct connect.
b2bDirectConnectOutbound	crossTenantAccessPolicyB2BSetting	Defines your partner-specific configuration for users in your organization going outbound to access resources in another organization via Microsoft Entra B2B direct connect.
inboundTrust	crossTenantAccessPolicyInboundTrust	Determines the partner-specific configuration for trusting other Conditional Access claims from external Microsoft Entra organizations.
isInMultiTenantOrganization	Boolean	Identifies whether a tenant is a member of a multitenant organization.
isServiceProvider	Boolean	Identifies whether the partner-specific configuration is a Cloud Service Provider for your organization.
tenantId	String	The tenant identifier for the partner Microsoft Entra organization. Read-only. Key.
tenantRestrictions	crossTenantAccessPolicyTenantRestrictions	Defines the partner-specific tenant restrictions configuration for users in your organization who access a partner organization using partner supplied identities on your network or devices.