LifecycleWorkflows-CustomExt.Read.All

Allows the app to read all Lifecycle workflows custom task extensions on behalf of a signed-in user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the LifecycleWorkflows-CustomExt.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	2cb19e7d-9012-40bf-9a22-69fc776af8b0	2973a298-1d69-4f87-8d30-7025f0ec19d7
DisplayText	Read all Lifecycle workflows custom task extensionss	Read all Lifecycle workflows custom task extensions
Description	Allows the app to read all Lifecycle workflows custom task extensions without a signed-in user.	Allows the app to read all Lifecycle workflows custom task extensions on behalf of a signed-in user.
AdminConsentRequired	Yes	Yes

Graph Methods

• API [v1.0]
• API [beta]
• PowerShell [v1.0]
• PowerShell [beta]

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	GET /identityGovernance/lifecycleWorkflows/customTaskExtensions
	GET /identityGovernance/lifecycleWorkflows/customTaskExtensions/{customTaskExtensionId}

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

• customTaskExtension

Graph reference: customTaskExtension

Property	Type	Description
authenticationConfiguration	microsoft.graph.customExtensionAuthenticationConfiguration	Configuration for securing the API call to the logic app. Inherited from customCalloutExtension. Required.
callbackConfiguration	microsoft.graph.identityGovernance.customTaskExtensionCallbackConfiguration	The callback configuration for a custom task extension.
clientConfiguration	microsoft.graph.customExtensionClientConfiguration	HTTP connection settings that define how long Microsoft Entra ID can wait for a connection to a logic app, how many times you can retry a timed-out connection and the exception scenarios when retries are allowed. Inherited from customCalloutExtension.
createdDateTime	DateTimeOffset	When the custom task extension was created. Supports $filter(lt, le, gt, ge, eq, ne) and $orderby.
description	String	Describes the purpose of the custom task extension for administrative use. Inherited from customCalloutExtension. Optional.
displayName	String	A unique string that identifies the custom task extension. Inherited from customCalloutExtension. Required. Supports $filter(eq, ne) and $orderby.
endpointConfiguration	microsoft.graph.customExtensionEndpointConfiguration	Details for allowing the custom task extension to call the logic app. Inherited from customCalloutExtension.
id	String	Inherited from entity. Supports $filter(eq, ne) and $orderby.
lastModifiedDateTime	DateTimeOffset	When the custom extension was last modified. Supports $filter(lt, le, gt, ge, eq, ne) and $orderby.