UserAuthMethod-ResourceKey.Read.All
Allows the app to read the keys associated with the user representing a resource account.
Merill's Note
For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the
UserAuthMethod-ResourceKey.Read.Allpermission.If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the
Export-MsIdAppConsentGrantReportcommand. See How To: Run a quick OAuth app audit of your tenant
| Category | Application | Delegated |
|---|---|---|
| Identifier | 94ed018c-a499-47e0-beef-803b93873ece | c86e40fc-66fd-4d68-802e-b90e3038f5e8 |
| DisplayText | Read and write all users' external authentication methods | Read the keys associated with the user representing a resource account. |
| Description | Allows the app to read the keys associated with the user representing a resource account. | Allows the app to read the keys associated with the user representing a resource account. |
| AdminConsentRequired | Yes | Yes |
Graph Methods
→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)
| Methods |
|---|
Resources
Granting this permission allows the calling application to access (and/or update) the following information in your tenant.
Graph reference: resourceAccountKeyAuthenticationMethod
| Property | Type | Description |
|---|---|---|
| createdDateTime | DateTimeOffset | The date and time when the resource account key was registered. Inherited from authenticationMethod. |
| displayName | String | The display name of the resource account key credential as shown in the Teams Room interface. |
| id | String | A unique identifier for this instance of an authentication method. Inherited from entity. |
| isUsable | Boolean | Indicates whether the method is usable for sign-in. Returned by default. |
| lastUsedDateTime | DateTimeOffset | The date and time when this authentication method was last used for sign-in. Requires $select. Inherited from authenticationMethod. |
| methodUsabilityReason | String | The reason for the usability state. Possible values are: EnabledByPolicy, DisabledByPolicy. **R |