Table of Contents

ExternalItem.Read.All

Allow the app to read external datasets and content, on behalf of the signed-in user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the ExternalItem.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category Application Delegated
Identifier 7a7cffad-37d2-4f48-afa4-c6ab129adcc2 922f9392-b1b7-483c-a4be-0089be7704fb
DisplayText Read all external items Read items in external datasets
Description Allows the app to read all external items without a signed-in user. Allow the app to read external datasets and content, on behalf of the signed-in user.
AdminConsentRequired Yes Yes

Graph Methods

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: externalConnection

Property Type Description
activitySettings microsoft.graph.externalConnectors.activitySettings Collects configurable settings related to activities involving connector content.
configuration microsoft.graph.externalConnectors.configuration Specifies additional application IDs that are allowed to manage the connection and to index content in the connection. Optional.
connectorId String The Teams app ID. Optional.
description String Description of the connection displayed in the Microsoft 365 admin center. Optional.
id String Developer-provided unique ID of the connection within the Microsoft Entra tenant. Must be between 3 and 32 characters in length. Must only contain alphanumeric characters. Cannot begin with Microsoft or be one of the following values: None, Directory, Exchange, ExchangeArchive, LinkedIn, Mailbox, OneDriveBusiness, SharePoint, Teams, Yammer, Connectors, TaskFabric, PowerBI, Assistant, TopicEngine, MSFT_All_Connectors. Required.
name String The display name of the connection to be displayed in the Microsoft 365 admin center. Maximum length of 128 characters. Required.
searchSettings microsoft.graph.externalConnectors.searchSettings The settings configuring the search experience for content in this connection, such as the display templates for search results.
state microsoft.graph.externalConnectors.connectionState Indicates the current state of the connection. Possible values are: draft, ready, obsolete, limitExceeded, unknownFutureValue.