Table of Contents

SynchronizationMetadata.ReadWrite.OwnedBy

Allows the app to read, delete object connections, and manage synchronization job metadata and linkage information only for provisioning jobs associated with (owned by) its service principals.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the SynchronizationMetadata.ReadWrite.OwnedBy permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category Application Delegated
Identifier dc64b9ee-d7b6-4de6-97d3-189051d1c773 -
DisplayText Read and manage synchronization metadata for owned provisioning jobs -
Description Allows the app to read, delete object connections, and manage synchronization job metadata and linkage information only for provisioning jobs associated with (owned by) its service principals. -
AdminConsentRequired - -

Graph Methods

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: objectConnection

Property Type Description
displayName String Display name of the connected object. Nullable. Read-only.
objectId String Identifier supplied in the request to look up the connection. Can be the source or target identifier for the object in the synchronization job. Key. Not nullable. Read-only.
objectTypeName String Logical object type, such as User or Group. Not nullable. Read-only.
sourceAnchor String Anchor or join value in the source directory. Not nullable. Read-only.
targetAnchor String Anchor or transformed identifier in the target space. Not nullable. Read-only.