Table of Contents

OnPremDirectorySynchronization.Read.All

Allows the app to read all on-premises directory synchronization information for the organization, on behalf of the signed-in user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the OnPremDirectorySynchronization.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category Application Delegated
Identifier bb70e231-92dc-4729-aff5-697b3f04be95 f6609722-4100-44eb-b747-e6ca0536989d
DisplayText Read all on-premises directory synchronization information Read all on-premises directory synchronization information
Description Allows the app to read all on-premises directory synchronization information for the organization, without a signed-in user. Allows the app to read all on-premises directory synchronization information for the organization, on behalf of the signed-in user.
AdminConsentRequired Yes Yes

Graph Methods

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: onPremisesDirectorySynchronization

Property Type Description
configuration onPremisesDirectorySynchronizationConfiguration Consists of configurations that can be fine-tuned and impact the on-premises directory synchronization process for a tenant. Nullable.
features onPremisesDirectorySynchronizationFeature Consists of directory synchronization features that can be enabled or disabled. Not nullable.
id String The unique Microsoft Entra tenant ID.