Table of Contents

SharePointTenantSettings.Read.All

Allows the application to read the tenant-level settings in SharePoint and OneDrive on behalf of the signed-in user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the SharePointTenantSettings.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category Application Delegated
Identifier 83d4163d-a2d8-4d3b-9695-4ae3ca98f888 2ef70e10-5bfd-4ede-a5f6-67720500b258
DisplayText Read SharePoint and OneDrive tenant settings Read SharePoint and OneDrive tenant settings
Description Allows the application to read the tenant-level settings of SharePoint and OneDrive, without a signed-in user. Allows the application to read the tenant-level settings in SharePoint and OneDrive on behalf of the signed-in user.
AdminConsentRequired Yes Yes

Graph Methods

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: sharepointSettings

Property Type Description
allowedDomainGuidsForSyncApp GUID collection Collection of trusted domain GUIDs for the OneDrive sync app.
availableManagedPathsForSiteCreation String collection Collection of managed paths available for site creation. Read-only.
deletedUserPersonalSiteRetentionPeriodInDays Int32 The number of days for preserving a deleted user's OneDrive.
excludedFileExtensionsForSyncApp String collection Collection of file extensions not uploaded by the OneDrive sync app.
idleSessionSignOut microsoft.graph.idleSessionSignOut Specifies the idle session sign-out policies for the tenant.
imageTaggingOption microsoft.graph.imageTaggingChoice Specifies the image tagging option for the tenant. Possible values are: disabled, basic, enhanced.
isCommentingOnSitePagesEnabled Boolean Indicates whether comments are allowed on modern site pages in SharePoint.
isFileActivityNotificationEnabled Boolean Indicates whether push notifications are enabled for OneDrive events.
isLegacyAuthProtocolsEnabled Boolean Indicates whether legacy authentication protocols are enabled for the tenant.
isLoopEnabled Boolean Indicates whether if Fluid Framework is allowed on SharePoint sites.
isMacSyncAppEnabled Boolean Indicates whether files can be synced using the OneDrive sync app for Mac.
isRequireAcceptingUserToMatchInvitedUserEnabled Boolean Indicates whether guests must sign in using the same account to which sharing invitations are sent.
isResharingByExternalUsersEnabled Boolean Indicates whether guests are allowed to reshare files, folders, and sites they don't own.
isSharePointMobileNotificationEnabled Boolean Indicates whether mobile push notifications are enabled for SharePoint.
isSharePointNewsfeedEnabled Boolean Indicates whether the newsfeed is allowed on the modern site pages in SharePoint.
isSiteCreationEnabled Boolean Indicates whether users are allowed to create sites.
isSiteCreationUIEnabled Boolean Indicates whether the UI commands for creating sites are shown.
isSitePagesCreationEnabled Boolean Indicates whether creating new modern pages is allowed on SharePoint sites.
isSitesStorageLimitAutomatic Boolean Indicates whether site storage space is automatically managed or if specific storage limits are set per site.
isSyncButtonHiddenOnPersonalSite Boolean Indicates whether the sync button in OneDrive is hidden.
isUnmanagedSyncAppForTenantRestricted Boolean Indicates whether users are allowed to sync files only on PCs joined to specific domains.
personalSiteDefaultStorageLimitInMB Int64 The default OneDrive storage limit for all new and existing users who are assigned a qualifying license. Measured in megabytes (MB).
sharingAllowedDomainList String collection Collection of email domains that are allowed for sharing outside the organization.
sharingBlockedDomainList String collection Collection of email domains that are blocked for sharing outside the organization.
sharingCapability microsoft.graph.sharingCapabilities Sharing capability for the tenant. Possible values are: disabled, externalUserSharingOnly, externalUserAndGuestSharing, existingExternalUserSharingOnly.
sharingDomainRestrictionMode microsoft.graph.sharingDomainRestrictionMode Specifies the external sharing mode for domains. Possible values are: none, allowList, blockList.
siteCreationDefaultManagedPath String The value of the team site managed path. This is the path under which new team sites will be created.
siteCreationDefaultStorageLimitInMB Int32 The default storage quota for a new site upon creation. Measured in megabytes (MB).
tenantDefaultTimezone String The default timezone of a tenant for newly created sites. For a list of possible values, see SPRegionalSettings.TimeZones property.