Skip to content

Adding Tenant Governance Permissions #1487

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
MIchaelMainer merged 2 commits into from
Apr 1, 2026
Merged

Adding Tenant Governance Permissions #1487

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
321578e
Adding Tenant Governance permission scopes for Graph Explorer consent
Mar 31, 2026
0150979
Merge branch 'master' into rsheth2805/add-tenant-governance-permissions
MIchaelMainer Apr 1, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
198 changes: 198 additions & 0 deletions permissions/permissions-descriptions.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,125 @@
{
"delegatedScopesList": [
{
"adminConsentDescription": "Allows the application to list, read, create, and delete Tenant Governance invitations on behalf of the signed-in user.",
"adminConsentDisplayName": "Read and write Tenant Governance invitations",
"consentDescription": "Allows the application to list, read, create, and delete Tenant Governance invitations on your behalf.",
"consentDisplayName": "Read and write Tenant Governance invitations",
"id": "42b91635-3803-4af2-a2d5-e91127f9c488",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-Invitation.ReadWrite.All"
},
{
"adminConsentDescription": "Allows the application to list and read all Tenant Governance invitations on behalf of the signed-in user.",
"adminConsentDisplayName": "Read Tenant Governance invitations",
"consentDescription": "Allows the application to list and read all Tenant Governance invitations on your behalf.",
"consentDisplayName": "Read Tenant Governance invitations",
"id": "fda068e8-0524-485e-8d7f-b5bc29b0dae9",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-Invitation.Read.All"
},
{
"adminConsentDescription": "Allows the application to list, read, create, and update Tenant Governance requests on behalf of the signed-in user.",
"adminConsentDisplayName": "Read and write Tenant Governance requests",
"consentDescription": "Allows the application to list, read, create, and update Tenant Governance requests on your behalf.",
"consentDisplayName": "Read and write Tenant Governance requests",
"id": "3c7a434e-4e5d-413f-be82-b77ea4ba5a4d",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-Request.ReadWrite.All"
},
{
"adminConsentDescription": "Allows the application to list and read all Tenant Governance requests on behalf of the signed-in user.",
"adminConsentDisplayName": "Read Tenant Governance requests",
"consentDescription": "Allows the application to list and read all Tenant Governance requests on your behalf.",
"consentDisplayName": "Read Tenant Governance requests",
"id": "a924b9f1-7af0-4982-aecf-b6e0e10b2830",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-Request.Read.All"
},
{
"adminConsentDescription": "Allows the application to list, read, and update Tenant Governance relationships on behalf of the signed-in user.",
"adminConsentDisplayName": "Read and write Tenant Governance relationships",
"consentDescription": "Allows the application to list, read, and update Tenant Governance relationships on your behalf.",
"consentDisplayName": "Read and write Tenant Governance relationships",
"id": "3fbcd6a3-a9a5-4d69-8a78-acc7d7195180",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-Relationship.ReadWrite.All"
},
{
"adminConsentDescription": "Allows the application to list and read all Tenant Governance relationships on behalf of the signed-in user.",
"adminConsentDisplayName": "Read Tenant Governance relationships",
"consentDescription": "Allows the application to list and read all Tenant Governance relationships on your behalf.",
"consentDisplayName": "Read Tenant Governance relationships",
"id": "0b1c2458-4845-477b-a704-3cce8b06bf28",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-Relationship.Read.All"
},
{
"adminConsentDescription": "Allows the application to list, read, create, update, and delete Tenant Governance policy templates on behalf of the signed-in user.",
"adminConsentDisplayName": "Read and write Tenant Governance policy templates",
"consentDescription": "Allows the application to list, read, create, update, and delete Tenant Governance policy templates on your behalf.",
"consentDisplayName": "Read and write Tenant Governance policy templates",
"id": "7cd0bd21-45fe-4c8e-a549-3c95bd27d185",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-PolicyTemplate.ReadWrite.All"
},
{
"adminConsentDescription": "Allows the application to list and read all Tenant Governance policy templates on behalf of the signed-in user.",
"adminConsentDisplayName": "Read Tenant Governance policy templates",
"consentDescription": "Allows the application to list and read all Tenant Governance policy templates on your behalf.",
"consentDisplayName": "Read Tenant Governance policy templates",
"id": "ad222a15-813d-46b8-8f8d-1976a69a74f3",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-PolicyTemplate.Read.All"
},
{
"adminConsentDescription": "Allows the application to read Tenant Governance settings and update them on behalf of the signed-in user.",
"adminConsentDisplayName": "Read and write Tenant Governance settings",
"consentDescription": "Allows the application to read Tenant Governance settings and update them on your behalf.",
"consentDisplayName": "Read and write Tenant Governance settings",
"id": "135f3533-12fc-4608-97ac-5c5cea64baf0",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-Setting.ReadWrite.All"
},
{
"adminConsentDescription": "Allows the application to read Tenant Governance settings on behalf of the signed-in user.",
"adminConsentDisplayName": "Read Tenant Governance settings",
"consentDescription": "Allows the application to read Tenant Governance settings on your behalf.",
"consentDisplayName": "Read Tenant Governance settings",
"id": "4ad3e05f-2467-49d9-baa2-8e4de7bcee9b",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-Setting.Read.All"
},
{
"adminConsentDescription": "Allows the application to list, read, and refresh related tenants information on behalf of the signed-in user.",
"adminConsentDisplayName": "Read and write related tenants",
"consentDescription": "Allows the application to list, read, and refresh related tenants information on your behalf.",
"consentDisplayName": "Read and write related tenants",
"id": "e61db2de-de55-461e-942d-52a028ed1076",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-RelatedTenant.ReadWrite.All"
},
{
"adminConsentDescription": "Allows the application to list and read related tenants information on behalf of the signed-in user.",
"adminConsentDisplayName": "Read related tenants",
"consentDescription": "Allows the application to list and read related tenants information on your behalf.",
"consentDisplayName": "Read related tenants",
"id": "9caaca93-f090-4b9a-b4bb-17de251354d4",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-RelatedTenant.Read.All"
},
{
"adminConsentDescription": "Allows the app to read and write passkey authentication methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.",
"adminConsentDisplayName": "Read and write all users' passkey methods",
Expand Down Expand Up @@ -5862,6 +5982,84 @@
}
],
"applicationScopesList": [
{
"adminConsentDescription": "Allows the application to list and read all Tenant Governance invitations without a signed-in user.",
"adminConsentDisplayName": "Read Tenant Governance invitations",
"allowedMemberTypes": [
"Application"
],
"consentDescription": null,
"consentDisplayName": null,
"id": "3f4f98e9-6faf-4e5f-814b-ed2ed8a4ec9e",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-Invitation.Read.All"
},
{
"adminConsentDescription": "Allows the application to list and read all Tenant Governance requests without a signed-in user.",
"adminConsentDisplayName": "Read Tenant Governance requests",
"allowedMemberTypes": [
"Application"
],
"consentDescription": null,
"consentDisplayName": null,
"id": "294294d5-2b81-4cf1-837c-28fc22bc3290",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-Request.Read.All"
},
{
"adminConsentDescription": "Allows the application to list and read all Tenant Governance relationships without a signed-in user.",
"adminConsentDisplayName": "Read Tenant Governance relationships",
"allowedMemberTypes": [
"Application"
],
"consentDescription": null,
"consentDisplayName": null,
"id": "41c250d0-8793-44e1-a130-5fdbd5bccd0a",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-Relationship.Read.All"
},
{
"adminConsentDescription": "Allows the application to list and read all Tenant Governance policy templates without a signed-in user.",
"adminConsentDisplayName": "Read Tenant Governance policy templates",
"allowedMemberTypes": [
"Application"
],
"consentDescription": null,
"consentDisplayName": null,
"id": "eb9465d8-e7c0-4301-8e51-927f34ee3134",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-PolicyTemplate.Read.All"
},
{
"adminConsentDescription": "Allows the application to read Tenant Governance settings without a signed-in user.",
"adminConsentDisplayName": "Read Tenant Governance settings",
"allowedMemberTypes": [
"Application"
],
"consentDescription": null,
"consentDisplayName": null,
"id": "e2d1cac5-0317-4ae3-aca9-59737eb75317",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-Setting.Read.All"
},
{
"adminConsentDescription": "Allows the application to list and read related tenants information without a signed-in user.",
"adminConsentDisplayName": "Read related tenants",
"allowedMemberTypes": [
"Application"
],
"consentDescription": null,
"consentDisplayName": null,
"id": "7ced9a83-8e7c-46df-b3e0-6b45a6ecedcd",
"isAdmin": true,
"isEnabled": true,
"value": "TenantGovernance-RelatedTenant.Read.All"
},
{
"adminConsentDescription": "Allows the application to read and write passkey authentication methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods",
"adminConsentDisplayName": "Read and write all users' passkey authentication methods",
Expand Down