ExternalConnection.Read.All

Allows the app to read all external connections on behalf of a signed-in user. The signed-in user must be an administrator.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the ExternalConnection.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	1914711b-a1cb-4793-b019-c2ce0ed21b8c	a38267a5-26b6-4d76-9493-935b7599116b
DisplayText	Read all external connections	Read all external connections
Description	Allows the app to read all external connections without a signed-in user.	Allows the app to read all external connections on behalf of a signed-in user. The signed-in user must be an administrator.
AdminConsentRequired	Yes	Yes

Graph Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	GET /external/connections
	GET /external/connections/{connectionsId}
	GET /external/connections/{connectionsId}/operations/{connectionOperationId}
	GET /external/connections/{connectionsId}/schema

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	GET /external/connections
	GET /external/connections/{connection-id}/operations/{operation-id}
	GET /external/connections/{id}
	GET /external/connections/{id}/schema

→ Command supports delegated access (access on behalf of a user)
→ Command supports app-only access (access without a user)

	Commands
	Get-MgExternalConnection
	Get-MgExternalConnectionOperation
	Get-MgExternalConnectionSchema

→ Command supports delegated access (access on behalf of a user)
→ Command supports app-only access (access without a user)

	Commands
	Get-MgBetaExternalConnection
	Get-MgBetaExternalConnectionOperation
	Get-MgBetaExternalConnectionSchema

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: connectionOperation

Property	Type	Description
error	publicError	If `status` is `failed`, provides more information about the error that caused the failure.
id	String	Unique identifier for the connectionOperation. Read-only.
status	microsoft.graph.externalConnectors.connectionOperationStatus	Indicates the status of the asynchronous operation. Possible values are: `unspecified`, `inprogress`, `completed`, `failed`, `unknownFutureValue`.

Graph reference: externalConnection

Property	Type	Description
activitySettings	microsoft.graph.externalConnectors.activitySettings	Collects configurable settings related to activities involving connector content.
configuration	microsoft.graph.externalConnectors.configuration	Specifies additional application IDs that are allowed to manage the connection and to index content in the connection. Optional.
connectorId	String	The Teams app ID. Optional.
description	String	Description of the connection displayed in the Microsoft 365 admin center. Optional.
id	String	Developer-provided unique ID of the connection within the Microsoft Entra tenant. Must be between 3 and 32 characters in length. Must only contain alphanumeric characters. Cannot begin with `Microsoft` or be one of the following values: `None`, `Directory`, `Exchange`, `ExchangeArchive`, `LinkedIn`, `Mailbox`, `OneDriveBusiness`, `SharePoint`, `Teams`, `Yammer`, `Connectors`, `TaskFabric`, `PowerBI`, `Assistant`, `TopicEngine`, `MSFT_All_Connectors`. Required.
name	String	The display name of the connection to be displayed in the Microsoft 365 admin center. Maximum length of 128 characters. Required.
searchSettings	microsoft.graph.externalConnectors.searchSettings	The settings configuring the search experience for content in this connection, such as the display templates for search results.
state	microsoft.graph.externalConnectors.connectionState	Indicates the current state of the connection. Possible values are: `draft`, `ready`, `obsolete`, `limitExceeded`, `unknownFutureValue`.

Graph reference: schema

Property	Type	Description
baseType	String	Must be set to `microsoft.graph.externalConnector.externalItem`. Required.
properties	property collection	The properties defined for the items in the connection. The minimum number of properties is one, the maximum is 128.

Table of Contents

ExternalConnection.Read.All

Graph Methods

Resources