Table of Contents

MailboxItem.Read.All

Allows the app to read all the users' mailbox items, without signed-in user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the MailboxItem.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category Application Delegated
Identifier 7d9f353d-a7bd-4fbb-822a-26d5dd39a3ce -
DisplayText Read all the users' mailbox items -
Description Allows the app to read all the users' mailbox items, without signed-in user. -
AdminConsentRequired - -

Graph Methods

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: mailboxFolder

Property Type Description
childFolderCount Int32 The number of immediate child folders in the current folder.
displayName String The display name of the folder.
id String The unique identifier for the folder.
parentFolderId String The unique identifier for the parent folder of this folder.
parentMailboxUrl String The routing link to the actual underlying mailbox where the folder physically resides. The folder can be accessed using GET {parentMailboxUrl}/folders/{id}, which treats the entire URL as an opaque string.

This method is especially important when auto-expanding archiving is enabled for a user's in-place archive mailbox. The user's archive content can span across multiple mailboxes in such scenarios.
totalItemCount Int32 The number of items in the folder.
type String Describes the folder class type.