LifecycleWorkflows.Read.All
Allows the app to list and read all workflows, tasks and related lifecycle workflows resources on behalf of the signed-in user.
Merill's Note
For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the
LifecycleWorkflows.Read.All
permission.If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the
Export-MsIdAppConsentGrantReport
command. See How To: Run a quick OAuth app audit of your tenant
Category | Application | Delegated |
---|---|---|
Identifier | 7c67316a-232a-4b84-be22-cea2c0906404 | 9bcb9916-765a-42af-bf77-02282e26b01a |
DisplayText | Read all lifecycle workflows resources | Read all lifecycle workflows resources |
Description | Allows the app to list and read all workflows, tasks and related lifecycle workflows resources without a signed-in user. | Allows the app to list and read all workflows, tasks and related lifecycle workflows resources on behalf of the signed-in user. |
AdminConsentRequired | Yes | Yes |
Graph Methods
→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)
Methods | |
---|---|
Resources
Granting this permission allows the calling application to access (and/or update) the following information in your tenant.
- customTaskExtension
- lifecycleManagementSettings
- run
- runSummary
- identitygovernance-task
- taskDefinition
- taskProcessingResult
- taskReport
- taskReportSummary
- timeBasedAttributeTrigger
- triggerAndScopeBasedConditions
- userProcessingResult
- workflow
- workflowExecutionConditions
- workflowTemplate
- workflowVersion
Graph reference: customTaskExtension
Property | Type | Description |
---|---|---|
authenticationConfiguration | microsoft.graph.customExtensionAuthenticationConfiguration | Configuration for securing the API call to the logic app. Inherited from customCalloutExtension. Required. |
callbackConfiguration | microsoft.graph.identityGovernance.customTaskExtensionCallbackConfiguration | The callback configuration for a custom task extension. |
clientConfiguration | microsoft.graph.customExtensionClientConfiguration | HTTP connection settings that define how long Microsoft Entra ID can wait for a connection to a logic app, how many times you can retry a timed-out connection and the exception scenarios when retries are allowed. Inherited from customCalloutExtension. |
createdDateTime | DateTimeOffset | When the custom task extension was created. Supports $filter (lt , le , gt , ge , eq , ne ) and $orderby . |
description | String | Describes the purpose of the custom task extension for administrative use. Inherited from customCalloutExtension. Optional. |
displayName | String | A unique string that identifies the custom task extension. Inherited from customCalloutExtension. Required. Supports $filter (eq , ne ) and $orderby . |
endpointConfiguration | microsoft.graph.customExtensionEndpointConfiguration | Details for allowing the custom task extension to call the logic app. Inherited from customCalloutExtension. |
id | String | Inherited from entity. Supports $filter (eq , ne ) and $orderby . |
lastModifiedDateTime | DateTimeOffset | When the custom extension was last modified. Supports $filter (lt , le , gt , ge , eq , ne ) and $orderby . |