SensitivityLabel.Read
Allows the app to get sensitivity labels.
Merill's Note
For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the
SensitivityLabel.Readpermission.If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the
Export-MsIdAppConsentGrantReportcommand. See How To: Run a quick OAuth app audit of your tenant
| Category | Application | Delegated |
|---|---|---|
| Identifier | 3b8e7aad-f6e3-4299-83f8-6fc6a5777f0b | 1aeb73ce-68d7-49b7-913a-eedc80844551 |
| DisplayText | Get labels application scope. | Get labels user scope. |
| Description | Allows the app to get sensitivity labels. | Allows the app to get sensitivity labels. |
| AdminConsentRequired | Yes | Yes |
Graph Methods
→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)
| Methods |
|---|
Resources
Granting this permission allows the calling application to access (and/or update) the following information in your tenant.
Graph reference: sensitivityLabel
| Property | Type | Description |
|---|---|---|
| actionSource | microsoft.graph.security.labelActionSource | Indicates the source of the action that resulted in the label being applied. Possible values are: manual, automatic, recommended, none. |
| autoLabeling | autoLabeling | The auto-labeling configuration for the label. |
| applicableTo | microsoft.graph.security.sensitivityLabelTarget | Specifies the workloads where the label can be applied. Possible values: email, site, unifiedGroup, teamwork, file, schematizedData. |
| applicationMode | microsoft.graph.security.applicationMode | Specifies how the label should be applied or recommended. Possible values are: manual, automatic, recommended. |
| assignedPolicies | labelPolicy collection | The collection of label policies that are assigned to the label. |
| autoTooltip | String | The tooltip displayed to users for recommended or automatically applied labels. |
| color | String | The color that the UI should display for the label, if configured. |
| contentFormats | String collection | Returns the supported content formats for the label. |
| description | String | The admin-defined description for the label. |
| displayName | String | The display name of the sensitivity label. |
| hasProtection | Boolean | Indicates whether the label has protection actions configured. |
| id | String | The label ID is a globally unique identifier (GUID). |
| isActive | Boolean | Indicates whether the label is active or not. Active labels should be hidden or disabled in the UI. |
| isAppliable | Boolean | Indicates whether the label can be applied to content. False if the label is a parent with child labels. |
| isDefault | Boolean | true if the label is the default label for the policy; false otherwise. |
| isEnabled | Boolean | true if the label is currently enabled; false otherwise. |
| isEndpointProtectionEnabled | Boolean | true if the label provides protection settings enforced by endpoint Data Loss Prevention; false otherwise. |
| isScopedToUser | Boolean | Indicates if the label is scoped to specific users or groups (true) or available to the entire tenant (false). |
| labelActions | labelActionBase collection | The actions that are associated with the label. |
| locale | String | The locale associated with the label's localized properties (for example, 'en-US'). Used in context of listing labels scoped to user/locale. |
| name | String | The plaintext name of the label. |
| priority | Int32 | The priority of the label. Lower numbers indicate higher priority. |
| sensitivity | Int32 | The sensitivity value of the label, where lower is less sensitive. |
| tooltip | String | The tooltip that should be displayed for the label in a UI. |