User.Export.All

Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the User.Export.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	405a51b5-8d8d-430b-9842-8be4b0e9f324	405a51b5-8d8d-430b-9842-8be4b0e9f324
DisplayText	Export user's data	Export user's data
Description	Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).	Allows the app to export data (e.g. customer content or system-generated logs), associated with any user in your company, when the app is used by a privileged user (e.g. a Company Administrator).
AdminConsentRequired	Yes	Yes

Graph Methods

• API [v1.0]
• API [beta]
• PowerShell [v1.0]
• PowerShell [beta]

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	GET /dataPolicyOperations/{id} User.Export.All and User.Read.All
	POST /users/{id}/exportPersonalData

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

• dataPolicyOperation

Graph reference: dataPolicyOperation

Property	Type	Description
completedDateTime	DateTimeOffset	Represents when the request for this data policy operation was completed, in UTC time, using the ISO 8601 format. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Null until the operation completes.
id	String	Unique key for this operation.
status	dataPolicyOperationStatus	Possible values are: notStarted, running, complete, failed, unknownFutureValue.
storageLocation	String	The URL location to where data is being exported for export requests.
userId	String	The id for the user on whom the operation is performed.
submittedDateTime	DateTimeOffset	Represents when the request for this data operation was submitted, in UTC time, using the ISO 8601 format. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z
progress	String	Specifies the progress of an operation.