TermStore.ReadWrite.All

Allows the app to read or modify data that the signed-in user has access to. This includes all sets, groups and terms in the term store.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the TermStore.ReadWrite.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	f12eb8d6-28e3-46e6-b2c0-b7e4dc69fc95	6c37c71d-f50f-4bff-8fd3-8a41da390140
DisplayText	Read and write all term store data	Read and write term store data
Description	Allows the app to read, edit or write all term store data, without a signed-in user. This includes all sets, groups and terms in the term store.	Allows the app to read or modify data that the signed-in user has access to. This includes all sets, groups and terms in the term store.
AdminConsentRequired	Yes	Yes

Graph Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	DELETE /sites/{site-id}/termStore/groups/{group-id}
	DELETE /sites/{site-id}/termStore/sets/{set-id}/terms/{term-id}
	DELETE sites/{site-id}/termStore/sets/{set-id}
	GET /sites/{site-id}/termStore
	GET /sites/{site-id}/termStore/groups
	GET /sites/{site-id}/termStore/groups/{group-id}
	GET /sites/{site-id}/termStore/groups/{group-id}/sets/{set-id}/terms/{term-id}
	GET /sites/{site-id}/termStore/sets/{set-id}
	GET /sites/{site-id}/termStore/sets/{set-id}/children
	GET /sites/{site-id}/termStore/sets/{set-id}/relations
	GET /sites/{site-id}/termStore/sets/{set-id}/terms/{term-id}
	GET /sites/{site-id}/termStore/sets/{set-id}/terms/{term-id}/children
	GET /sites/{site-id}/termStore/sets/{set-id}/terms/{term-id}/relations
	GET sites/{site-id}/termStore/groups/{group-id}/sets
	PATCH /sites/{site-id}/termStore/sets/{set-id}
	PATCH /sites/{site-id}/termStore/sets/{set-id}/terms/{term-id}
	PATCH sites/{site-id}/termStore
	POST /sites/{site-id}/termStore/groups
	POST /sites/{site-id}/termStore/sets
	POST /sites/{site-id}/termStore/sets/{set-id}/children
	POST /sites/{site-id}/termStore/sets/{set-id}/terms/{term-id}/children
	POST /sites/{site-id}/termStore/sets/{set-id}/terms/{term-id}/relations

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	DELETE /termStore/groups/{groupId}
	DELETE /termStore/sets/{setId}
	DELETE /termStore/sets/{setId}/terms/{termId}
	GET /sites/{site-id}/termStore
	GET /sites/{site-id}/termStore/groups/{group-id}
	GET /sites/{site-id}/termStore/groups/{group-id}/sets/{set-id}/terms/{term-id}
	GET /sites/{site-id}/termStore/sets/{set-id}
	GET /sites/{site-id}/termStore/sets/{set-id}/terms/{term-id}
	GET /termStore
	GET /termStore/groups
	GET /termStore/groups/{group-id}
	GET /termStore/groups/{group-id}/sets/{set-id}/terms/{term-id}
	GET /termStore/groups/{groupId}/sets
	GET /termStore/sets/{set-id}
	GET /termStore/sets/{set-id}/terms/{term-id}
	GET /termStore/sets/{setId}/children
	GET /termStore/sets/{setId}/relations
	GET /termStore/sets/{setId}/terms/{termId}/children
	GET /termStore/sets/{setId}/terms/{termId}/relations
	PATCH /termStore
	PATCH /termStore/sets/{setId}
	PATCH /termStore/sets/{setId}/terms/{termId}
	POST /termStore/groups
	POST /termStore/sets
	POST /termStore/sets/{setId}/children
	POST /termStore/sets/{setId}/terms/{termId}/children
	POST /termStore/sets/{setId}/terms/{termId}/relations

→ Command supports delegated access (access on behalf of a user)
→ Command supports app-only access (access without a user)

	Commands
	Get-MgSiteTermStore
	Get-MgSiteTermStoreGroup
	Get-MgSiteTermStoreGroupSet
	Get-MgSiteTermStoreGroupSetTerm
	Get-MgSiteTermStoreSet
	Get-MgSiteTermStoreSetChild
	Get-MgSiteTermStoreSetRelation
	New-MgSiteTermStoreGroup
	New-MgSiteTermStoreSet
	New-MgSiteTermStoreSetChild
	New-MgSiteTermStoreSetTermRelation
	Remove-MgSiteTermStoreGroup
	Remove-MgSiteTermStoreSet
	Remove-MgSiteTermStoreSetTerm
	Update-MgSiteTermStore
	Update-MgSiteTermStoreSet
	Update-MgSiteTermStoreSetTerm

→ Command supports delegated access (access on behalf of a user)
→ Command supports app-only access (access without a user)

	Commands
	Get-MgBetaSiteTermStore
	Get-MgBetaSiteTermStoreGroup
	Get-MgBetaSiteTermStoreGroupSetTerm
	Get-MgBetaSiteTermStoreSet

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: keyValue

Property	Type	Description
key	string	Key for the key-value pair.
value	string	Value for the key-value pair.

Graph reference: Group

Property	Type	Description
createdDateTime	DateTimeOffset	Date and time of the group creation. Read-only.
description	string	Description that gives details on the term usage.
displayName	string	Name of the group.
id	string	Unique identifier of the group. Read-Only.
parentSiteId	string	ID of the parent site of this group.
scope	string	Returns the type of the group. Possible values are: `global`, `system`, and `siteCollection`.

Property	Type	Description
description	String	The description in the localized language.
languageTag	String	The language tag for the label.

Graph reference: localizedLabel

Property	Type	Description
isDefault	Boolean	Indicates whether the label is the default label.
languageTag	String	The language tag for the label.
name	String	The name of the label.

Property	Type	Description
languageTag	String	The language tag for the label.
name	String	The name in the localized language.

Graph reference: relation

Property	Type	Description
id	String	The ID of the relation.
relationship	microsoft.graph.termStore.relationType	The type of relation. Possible values are: `pin`, `reuse`.

Graph reference: set

Property	Type	Description
createdDateTime	DateTimeOffset	Date and time of set creation. Read-only.
description	String	Description that gives details on the term usage.
id	String	Unique identifier. Read-only.
localizedNames	microsoft.graph.termStore.localizedName collection	Name of the set for each languageTag.
properties	microsoft.graph.keyValue collection	Custom properties for the set.

Graph reference: store

Property	Type	Description
defaultLanguageTag	String	Default language of the term store.
id	String	Unique identifier of the term store. Read-only.
languageTags	String collection	List of languages for the term store.

Graph reference: term

Property	Type	Description
createdDateTime	DateTimeOffset	Date and time of term creation. Read-only.
descriptions	microsoft.graph.termStore.localizedDescription collection	Description about term that is dependent on the languageTag.
id	String	Unique identifier of term. Read-Only.
labels	microsoft.graph.termStore.localizedLabel collection	Label metadata for a term.
lastModifiedDateTime	DateTimeOffset	Last date and time of term modification. Read-only.
properties	microsoft.graph.keyValue collection	Collection of properties on the term.

Table of Contents

TermStore.ReadWrite.All

Graph Methods

Resources