TenantGovernance-Relationship.Read.All
Allows the application to list and read all Tenant Governance relationships on behalf of the signed-in user.
Merill's Note
For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the
TenantGovernance-Relationship.Read.Allpermission.If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the
Export-MsIdAppConsentGrantReportcommand. See How To: Run a quick OAuth app audit of your tenant
| Category | Application | Delegated |
|---|---|---|
| Identifier | 41c250d0-8793-44e1-a130-5fdbd5bccd0a | 0b1c2458-4845-477b-a704-3cce8b06bf28 |
| DisplayText | Read Tenant Governance relationships | Read Tenant Governance relationships |
| Description | Allows the application to list and read all Tenant Governance relationships without a signed-in user. | Allows the application to list and read all Tenant Governance relationships on behalf of the signed-in user. |
| AdminConsentRequired | Yes | Yes |
Graph Methods
→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)
| Methods |
|---|
Resources
Granting this permission allows the calling application to access (and/or update) the following information in your tenant.
Graph reference: governanceRelationship
| Property | Type | Description |
|---|---|---|
| createdType | microsoft.graph.tenantGovernanceServices.relationshipCreationType | Indicates how the relationship was created. The possible values are: approvedByAdmin, addOnTenant, unknownFutureValue.Supports $filter (eq, ne) and $orderBy. |
| creationDateTime | DateTimeOffset | The date and time when the relationship was created. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2026 is 2026-01-01T00:00:00Z.Supports $filter (lt, le, gt, ge, eq, ne) and $orderBy. |
| governedTenantId | String | The Microsoft Entra tenant ID of the governed tenant. Supports $filter (eq, ne) and $orderBy. |
| governedTenantName | String | The display name of the governed tenant. Supports $filter (eq, ne) and $orderBy. |
| governingTenantId | String | The Microsoft Entra tenant ID of the governing tenant. Supports $filter (eq, ne) and $orderBy. |
| governingTenantName | String | The display name of the governing tenant. Supports $filter (eq, ne) and $orderBy. |
| id | String | The unique identifier for the governance relationship. Inherited from entity. Supports $filter (eq, ne) and $orderBy. |
| policySnapshot | microsoft.graph.tenantGovernanceServices.relationshipPolicy | A snapshot of the governance policy applied to this relationship, including delegated administration role assignments and multi-tenant applications to provision. |
| status | microsoft.graph.tenantGovernanceServices.relationshipStatus | The current status of the governance relationship. The possible values are: active, terminated, terminationRequestedByGoverningTenant, unknownFutureValue.Supports $filter (eq, ne) and $orderBy. |