Table of Contents

SynchronizationMetadata.Read.OwnedBy

Allows the app to read synchronization job metadata and object connection linkage information only for provisioning jobs associated with (owned by) its service principals.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the SynchronizationMetadata.Read.OwnedBy permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category Application Delegated
Identifier 7090aa1b-99c0-444b-b40b-528bd2f35087 -
DisplayText Read synchronization metadata for owned provisioning jobs -
Description Allows the app to read synchronization job metadata and object connection linkage information only for provisioning jobs associated with (owned by) its service principals. -
AdminConsentRequired - -

Graph Methods

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: objectConnection

Property Type Description
displayName String Display name of the connected object. Nullable. Read-only.
objectId String Identifier supplied in the request to look up the connection. Can be the source or target identifier for the object in the synchronization job. Key. Not nullable. Read-only.
objectTypeName String Logical object type, such as User or Group. Not nullable. Read-only.
sourceAnchor String Anchor or join value in the source directory. Not nullable. Read-only.
targetAnchor String Anchor or transformed identifier in the target space. Not nullable. Read-only.