LifecycleWorkflows.Read.All
Allows the app to list and read all workflows, tasks and related lifecycle workflows resources on behalf of the signed-in user.
Merill's Note
For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the
LifecycleWorkflows.Read.Allpermission.If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the
Export-MsIdAppConsentGrantReportcommand. See How To: Run a quick OAuth app audit of your tenant
| Category | Application | Delegated |
|---|---|---|
| Identifier | 7c67316a-232a-4b84-be22-cea2c0906404 | 9bcb9916-765a-42af-bf77-02282e26b01a |
| DisplayText | Read all lifecycle workflows resources | Read all lifecycle workflows resources |
| Description | Allows the app to list and read all workflows, tasks and related lifecycle workflows resources without a signed-in user. | Allows the app to list and read all workflows, tasks and related lifecycle workflows resources on behalf of the signed-in user. |
| AdminConsentRequired | Yes | Yes |
Graph Methods
→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)
| Methods | |
|---|---|
Resources
Granting this permission allows the calling application to access (and/or update) the following information in your tenant.
- customTaskExtension
- lifecycleManagementSettings
- run
- runSummary
- identitygovernance-task
- taskDefinition
- taskProcessingResult
- taskReport
- taskReportSummary
- timeBasedAttributeTrigger
- topTasksInsightsSummary
- topWorkflowsInsightsSummary
- triggerAndScopeBasedConditions
- userProcessingResult
- userSummary
- workflow
- workflowExecutionConditions
- workflowsInsightsByCategory
- workflowsInsightsSummary
- workflowTemplate
- workflowVersion
Graph reference: customTaskExtension
| Property | Type | Description |
|---|---|---|
| authenticationConfiguration | microsoft.graph.customExtensionAuthenticationConfiguration | Configuration for securing the API call to the logic app. Inherited from customCalloutExtension. Required. |
| callbackConfiguration | microsoft.graph.identityGovernance.customTaskExtensionCallbackConfiguration | The callback configuration for a custom task extension. |
| clientConfiguration | microsoft.graph.customExtensionClientConfiguration | HTTP connection settings that define how long Microsoft Entra ID can wait for a connection to a logic app, how many times you can retry a timed-out connection and the exception scenarios when retries are allowed. Inherited from customCalloutExtension. |
| createdDateTime | DateTimeOffset | When the custom task extension was created. Supports $filter(lt, le, gt, ge, eq, ne) and $orderby. |
| description | String | Describes the purpose of the custom task extension for administrative use. Inherited from customCalloutExtension. Optional. |
| displayName | String | A unique string that identifies the custom task extension. Inherited from customCalloutExtension. Required. Supports $filter(eq, ne) and $orderby. |
| endpointConfiguration | microsoft.graph.customExtensionEndpointConfiguration | Details for allowing the custom task extension to call the logic app. Inherited from customCalloutExtension. |
| id | String | Inherited from entity. Supports $filter(eq, ne) and $orderby. |
| lastModifiedDateTime | DateTimeOffset | When the custom extension was last modified. Supports $filter(lt, le, gt, ge, eq, ne) and $orderby. |