Table of Contents

LifecyclePolicies-AgentId.Read.All

Allows the app to read identity lifecycle policies for agent identities that the signed-in user has access to in the organization.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the LifecyclePolicies-AgentId.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category Application Delegated
Identifier 6343d63f-034f-45b5-832d-9f9d7632e182 65857db0-62ac-4279-aa73-c2b5dab186f5
DisplayText Read identity lifecycle policies for agent identities Read identity lifecycle policies for agent identities
Description Allows the app to read identity lifecycle policies for agent identities in the organization, without a signed-in user. Allows the app to read identity lifecycle policies for agent identities that the signed-in user has access to in the organization.
AdminConsentRequired Yes Yes

Graph Methods

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: lifecyclePolicy

Property Type Description
createdDateTime DateTimeOffset The date and time when the policy was created.
description String The description of the policy.
displayName String The display name of the policy.
enforcementAction microsoft.graph.identityGovernance.lifecyclePolicyEnforcementAction The action taken when an identity governed by the policy becomes non-compliant. This is a polymorphic type; the possible types are deleteOnlyEnforcementAction, disableOnlyEnforcementAction, and disableThenDeleteEnforcementAction.
gracePeriodInDays Int32 The number of days after an identity becomes non-compliant before the enforcement action is applied.
id String The unique identifier for the policy. Inherited from entity.
isEnabled Boolean Indicates whether the policy is enabled and actively evaluated.
lastModifiedDateTime DateTimeOffset The date and time when the policy was last modified.
notificationSchedule microsoft.graph.identityGovernance.lifecyclePolicyNotificationSettings The notification settings for the policy, including the offsets, in days after non-compliance, at which notifications are sent.
policySource microsoft.graph.identityGovernance.lifecyclePolicySource Indicates whether the policy is system-managed (a built-in default) or created by an administrator. The possible values are: userCreated, systemDefault, unknownFutureValue.
scope subjectSet The set of subjects that the policy applies to. For example, use an allExcludingGroupsSubjectSet to exclude specific groups from evaluation.
versionNumber Int32 The version number of the policy, which increments each time the policy is updated.