SynchronizationMetadata.Read.All
Allows the app to read synchronization job metadata and object connection linkage information across all service principal provisioning jobs in the organization.
Merill's Note
For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the
SynchronizationMetadata.Read.Allpermission.If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the
Export-MsIdAppConsentGrantReportcommand. See How To: Run a quick OAuth app audit of your tenant
| Category | Application | Delegated |
|---|---|---|
| Identifier | 9c668bfa-7e4d-4ea4-9f0b-ba2d67cac55c | 711dc0a5-feb5-4e98-958c-cce64a7f5c99 |
| DisplayText | Read synchronization metadata for all provisioning jobs | Read synchronization metadata that you can access |
| Description | Allows the app to read synchronization job metadata and object connection linkage information across all service principal provisioning jobs in the organization, without a signed-in user. | Allows the app to read synchronization job metadata and object connection linkage information across all service principal provisioning jobs in the organization. |
| AdminConsentRequired | Yes | Yes |
Graph Methods
→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)
| Methods |
|---|
Resources
Granting this permission allows the calling application to access (and/or update) the following information in your tenant.
Graph reference: objectConnection
| Property | Type | Description |
|---|---|---|
| displayName | String | Display name of the connected object. Nullable. Read-only. |
| objectId | String | Identifier supplied in the request to look up the connection. Can be the source or target identifier for the object in the synchronization job. Key. Not nullable. Read-only. |
| objectTypeName | String | Logical object type, such as User or Group. Not nullable. Read-only. |
| sourceAnchor | String | Anchor or join value in the source directory. Not nullable. Read-only. |
| targetAnchor | String | Anchor or transformed identifier in the target space. Not nullable. Read-only. |