NetworkAccessPolicy.Read.All
Allows the app to read your organization's security and routing network access policies on behalf of the signed-in user.
Merill's Note
For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the
NetworkAccessPolicy.Read.All
permission.If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the
Export-MsIdAppConsentGrantReport
command. See How To: Run a quick OAuth app audit of your tenant
Category | Application | Delegated |
---|---|---|
Identifier | 8a3d36bf-cb46-4bcc-bec9-8d92829dab84 | ba22922b-752c-446f-89d7-a2d92398fceb |
DisplayText | Read all security and routing policies for network access | Read security and routing policies for network access |
Description | Allows the app to read your organization's network access policies, without a signed-in user. | Allows the app to read your organization's security and routing network access policies on behalf of the signed-in user. |
AdminConsentRequired | Yes | No |
Graph Methods
→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)
Methods |
---|
Resources
Granting this permission allows the calling application to access (and/or update) the following information in your tenant.
- conditionalAccessSettings
- crossTenantAccess
- crossTenantSummary
- destination
- destinationSummary
- device
- deviceUsageSummary
- entitiesSummary
- filteringPolicy
- filteringPolicyLink
- filteringRule
- forwardingPolicyLink
- forwardingProfile
- remoteNetwork
- tenantStatus
- transactionSummary
- networkaccess-user
- webCategoriesSummary
Graph reference: conditionalAccessSettings
Property | Type | Description |
---|---|---|
id | String | Identifier. Inherited from microsoft.graph.entity. |
signalingStatus | microsoft.graph.networkaccess.status | When SignalingStatus is enabled, the Conditional Access policy includes zero trust network access information. The possible values are: enabled , disabled . |