SecurityCopilotWorkspaces.Read.All

Allows the app to read all Security Copilot signed-in user's resources on behalf of the signed-in user

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the SecurityCopilotWorkspaces.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	-	84499c31-ac2e-44d3-a0cf-a6c386d4dfe8
DisplayText	-	Read all Security Copilot resources for the signed-in user
Description	-	Allows the app to read all Security Copilot signed-in user's resources on behalf of the signed-in user
AdminConsentRequired	Yes	No

Graph Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	GET /security/securityCopilot/workspaces
	GET /security/securityCopilot/workspaces/{workspaceId}/plugins
	GET /security/securityCopilot/workspaces/{workspaceId}/sessions
	GET /security/securityCopilot/workspaces/{workspaceId}/sessions/{sessionId}
	GET /security/securityCopilot/workspaces/{workspaceId}/sessions/{sessionId}/prompts
	GET /security/securityCopilot/workspaces/{workspaceId}/sessions/{sessionId}/prompts/{promptId}
	GET /security/securityCopilot/workspaces/{workspaceId}/sessions/{sessionId}/prompts/{promptId}/evaluations
	GET /security/securityCopilot/workspaces/{workspaceId}/sessions/{sessionId}/prompts/{promptId}/evaluations/{evaluationId}
	PATCH /security/securityCopilot/workspaces/{workspaceId}/sessions/{sessionId}
	POST /security/securityCopilot/workspaces/{workspaceId}/sessions
	POST /security/securityCopilot/workspaces/{workspaceId}/sessions/{sessionId}/prompts
	POST /security/securityCopilot/workspaces/{workspaceId}/sessions/{sessionId}/prompts/{promptId}/evaluations

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: evaluation

Property	Type	Description
completedDateTime	DateTimeOffset	Evaluation completion time.
createdDateTime	DateTimeOffset	Evaluation created time.
executionCount	Int64	Evaluation execution count.
id	String	Represents the unique ID of the Security Copilot evaluation. Inherits from entity.
isCancelled	Boolean	Evaluation cancellation status.
lastModifiedDateTime	DateTimeOffset	Evaluation modified time.
result	microsoft.graph.security.securityCopilot.evaluationResult	Evaluation results collection.
runStartDateTime	DateTimeOffset	Evaluation Run start time.
state	microsoft.graph.security.securityCopilot.evaluationState	Evaluation state during poll. The possible values are: `unknown`, `created`, `running`, `completed`, `cancelled`, `pending`, `deferred`, `waitingForInput`, `unknownFutureValue`.

Graph reference: plugin

Property	Type	Description
authorization	microsoft.graph.security.securityCopilot.pluginAuth	Authorization for the plugin.
catalogScope	microsoft.graph.security.securityCopilot.pluginCatalogScope	Lists the scope available for the use of the plugin. The possible values are: `none`, `user`, `workspace`, `tenant`, `global`, `geoGlobal`, `userWorkspace`, `unknownFutureValue`.
category	microsoft.graph.security.securityCopilot.pluginCategory	Category of the plugin. The possible values are: `hidden`, `microsoft`, `microsoftConnectors`, `other`, `web`, `testing`, `plugin`, `unknownFutureValue`.
description	String	Brief description of the plugin.
displayName	String	Display name of the plugin. Supports `$filter` (`eq`).
isEnabled	Boolean	Displays whether the plugin is enabled for use within the catalogScope. Supports `$filter` (`eq`).
name	String	Represents the name of the plugin. Primary key. Supports `$filter` (`eq`, `contains`).
previewState	microsoft.graph.security.securityCopilot.pluginPreviewStates	Describes the use and availability of the plugin. The possible values are: `ga`, `public`, `private`, `unknownFutureValue`.
settings	microsoft.graph.security.securityCopilot.pluginSetting collection	Settings for the plugin.
supportedAuthTypes	microsoft.graph.security.securityCopilot.pluginAuthTypes	Authorization types used for the plugin. The possible values are: `none`, `basic`, `aPIKey`, `oAuthAuthorizationCodeFlow`, `oAuthClientCredentialsFlow`, `aad`, `serviceHttp`, `aadDelegated`, `oAuthPasswordGrantFlow`, `unknownFutureValue`. Currently unsupported.

Graph reference: security-securitycopilot-prompt

Property	Type	Description
content	String	Input content to the prompt.
createdDateTime	DateTimeOffset	Created time.
id	String	Represents the unique ID of the Security Copilot prompt. Inherits from entity.
inputs	microsoft.graph.Dictionary	Not implemented.
lastModifiedDateTime	DateTimeOffset	Last modified time.
skillInputDescriptors	microsoft.graph.security.securityCopilot.skillInputDescriptor collection	Skill Input descriptor.
skillName	String	Skill name.
type	microsoft.graph.security.securityCopilot.promptType	Prompt types. The possible values are: `unknown`, `context`, `prompt`, `skill`, `feedback`, `unknownFutureValue`. Only `prompt` is currently supported.

Graph reference: session

Property	Type	Description
createdDateTime	DateTimeOffset	Created time of the session (UTC).
displayName	String	Display name for the session.
id	String	Represents the unique ID of the Security Copilot session. Inherits from entity.
lastModifiedDateTime	DateTimeOffset	Last modified time of the session (UTC). Updated when **d

Graph reference: security-securitycopilot-workspace

Property	Type	Description
displayName	String	Name of the Security Copilot workspace.
id	String	Represents the unique ID of the Security Copilot workspace or `default` to represent the default workspace that was created as part of the initial onboarding to Security Copilot. Inherits from entity

Table of Contents

SecurityCopilotWorkspaces.Read.All

Graph Methods

Resources