Microsoft Graph permission grants are the records and APIs in Microsoft Entra ID that represent the consent an application has to access resources. They link a client app (service principal) to a resource API and the specific permissions approved, and are used during token issuance to determine what the app can do.
openapi: 3.1.0
info:
title: Microsoft Graph Permissiongrants
description: Needs a description.
paths:
/chats/{chat-id}/permissionGrants:
description: >-
Provides operations to manage the permissionGrants property of the
microsoft.graph.chat entity.
get:
tags:
- chats.resourceSpecificPermissionGrant
summary: Microsoft Graph List permissionGrants of a chat
description: >-
List all resource-specific permission grants on the chat. This list
specifies the Microsoft Entra apps that have access to the chat, along
with the corresponding resource-specific access that each app has.
externalDocs:
description: Find more info here
url: >-
https://learn.microsoft.com/graph/api/chat-list-permissiongrants?view=graph-rest-1.0
operationId: chats.ListPermissionGrants
parameters:
- $ref: '#/components/parameters/top'
- $ref: '#/components/parameters/skip'
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
- $ref: '#/components/parameters/count'
- name: $orderby
in: query
description: Order items by property values
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
$ref: >-
#/components/responses/microsoft.graph.resourceSpecificPermissionGrantCollectionResponse
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
x-ms-docs-operation-type: operation
post:
tags:
- chats.resourceSpecificPermissionGrant
summary: Microsoft Graph Create new navigation property to permissionGrants for chats
operationId: chats.CreatePermissionGrants
requestBody:
description: New navigation property
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
required: true
responses:
2XX:
description: Created navigation property.
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: chat-id
in: path
description: The unique identifier of chat
required: true
schema:
type: string
x-ms-docs-key-type: chat
/chats/{chat-id}/permissionGrants/{resourceSpecificPermissionGrant-id}:
description: >-
Provides operations to manage the permissionGrants property of the
microsoft.graph.chat entity.
get:
tags:
- chats.resourceSpecificPermissionGrant
summary: Microsoft Graph Get permissionGrants from chats
description: A collection of permissions granted to apps for the chat.
operationId: chats.GetPermissionGrants
parameters:
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
description: Retrieved navigation property
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
patch:
tags:
- chats.resourceSpecificPermissionGrant
summary: Microsoft Graph Update the navigation property permissionGrants in chats
operationId: chats.UpdatePermissionGrants
requestBody:
description: New navigation property values
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
delete:
tags:
- chats.resourceSpecificPermissionGrant
summary: Microsoft Graph Delete navigation property permissionGrants for chats
operationId: chats.DeletePermissionGrants
parameters:
- name: If-Match
in: header
description: ETag
schema:
type: string
responses:
'204':
description: Success
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: chat-id
in: path
description: The unique identifier of chat
required: true
schema:
type: string
x-ms-docs-key-type: chat
- name: resourceSpecificPermissionGrant-id
in: path
description: The unique identifier of resourceSpecificPermissionGrant
required: true
schema:
type: string
x-ms-docs-key-type: resourceSpecificPermissionGrant
/chats/{chat-id}/permissionGrants/$count:
description: Provides operations to count the resources in the collection.
get:
tags:
- chats.resourceSpecificPermissionGrant
summary: Microsoft Graph Get the number of the resource
operationId: chats.permissionGrants.GetCount-7597
parameters:
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
responses:
2XX:
$ref: '#/components/responses/ODataCountResponse'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
parameters:
- name: chat-id
in: path
description: The unique identifier of chat
required: true
schema:
type: string
x-ms-docs-key-type: chat
/groups/{group-id}/permissionGrants:
description: >-
Provides operations to manage the permissionGrants property of the
microsoft.graph.group entity.
get:
tags:
- groups.resourceSpecificPermissionGrant
summary: Microsoft Graph List permissionGrants of a group
description: >-
List all resource-specific permission grants on the group. This list
specifies the Microsoft Entra apps that have access to the group, along
with the corresponding resource-specific access that each app has.
externalDocs:
description: Find more info here
url: >-
https://learn.microsoft.com/graph/api/group-list-permissiongrants?view=graph-rest-1.0
operationId: groups.ListPermissionGrants
parameters:
- $ref: '#/components/parameters/top'
- $ref: '#/components/parameters/skip'
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
- $ref: '#/components/parameters/count'
- name: $orderby
in: query
description: Order items by property values
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
$ref: >-
#/components/responses/microsoft.graph.resourceSpecificPermissionGrantCollectionResponse
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
x-ms-docs-operation-type: operation
post:
tags:
- groups.resourceSpecificPermissionGrant
summary: Microsoft Graph Create new navigation property to permissionGrants for groups
operationId: groups.CreatePermissionGrants
requestBody:
description: New navigation property
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
required: true
responses:
2XX:
description: Created navigation property.
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: group-id
in: path
description: The unique identifier of group
required: true
schema:
type: string
x-ms-docs-key-type: group
/groups/{group-id}/permissionGrants/{resourceSpecificPermissionGrant-id}:
description: >-
Provides operations to manage the permissionGrants property of the
microsoft.graph.group entity.
get:
tags:
- groups.resourceSpecificPermissionGrant
summary: Microsoft Graph Get permissionGrants from groups
operationId: groups.GetPermissionGrants
parameters:
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
description: Retrieved navigation property
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
patch:
tags:
- groups.resourceSpecificPermissionGrant
summary: Microsoft Graph Update the navigation property permissionGrants in groups
operationId: groups.UpdatePermissionGrants
requestBody:
description: New navigation property values
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
delete:
tags:
- groups.resourceSpecificPermissionGrant
summary: Microsoft Graph Delete navigation property permissionGrants for groups
operationId: groups.DeletePermissionGrants
parameters:
- name: If-Match
in: header
description: ETag
schema:
type: string
responses:
'204':
description: Success
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: group-id
in: path
description: The unique identifier of group
required: true
schema:
type: string
x-ms-docs-key-type: group
- name: resourceSpecificPermissionGrant-id
in: path
description: The unique identifier of resourceSpecificPermissionGrant
required: true
schema:
type: string
x-ms-docs-key-type: resourceSpecificPermissionGrant
/groups/{group-id}/permissionGrants/$count:
description: Provides operations to count the resources in the collection.
get:
tags:
- groups.resourceSpecificPermissionGrant
summary: Microsoft Graph Get the number of the resource
operationId: groups.permissionGrants.GetCount-76af
parameters:
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
responses:
2XX:
$ref: '#/components/responses/ODataCountResponse'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
parameters:
- name: group-id
in: path
description: The unique identifier of group
required: true
schema:
type: string
x-ms-docs-key-type: group
/groups/{group-id}/team/permissionGrants:
description: >-
Provides operations to manage the permissionGrants property of the
microsoft.graph.team entity.
get:
tags:
- Groups.team
summary: Microsoft Graph Get permissionGrants from groups
description: A collection of permissions granted to apps to access the team.
operationId: groups.team.ListPermissionGrants
parameters:
- $ref: '#/components/parameters/top'
- $ref: '#/components/parameters/skip'
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
- $ref: '#/components/parameters/count'
- name: $orderby
in: query
description: Order items by property values
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
$ref: >-
#/components/responses/microsoft.graph.resourceSpecificPermissionGrantCollectionResponse
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
x-ms-docs-operation-type: operation
post:
tags:
- Groups.team
summary: Microsoft Graph Create new navigation property to permissionGrants for groups
operationId: groups.team.CreatePermissionGrants
requestBody:
description: New navigation property
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
required: true
responses:
2XX:
description: Created navigation property.
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: group-id
in: path
description: The unique identifier of group
required: true
schema:
type: string
x-ms-docs-key-type: group
/groups/{group-id}/team/permissionGrants/{resourceSpecificPermissionGrant-id}:
description: >-
Provides operations to manage the permissionGrants property of the
microsoft.graph.team entity.
get:
tags:
- Groups.team
summary: Microsoft Graph Get permissionGrants from groups
description: A collection of permissions granted to apps to access the team.
operationId: groups.team.GetPermissionGrants
parameters:
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
description: Retrieved navigation property
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
patch:
tags:
- Groups.team
summary: Microsoft Graph Update the navigation property permissionGrants in groups
operationId: groups.team.UpdatePermissionGrants
requestBody:
description: New navigation property values
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
delete:
tags:
- Groups.team
summary: Microsoft Graph Delete navigation property permissionGrants for groups
operationId: groups.team.DeletePermissionGrants
parameters:
- name: If-Match
in: header
description: ETag
schema:
type: string
responses:
'204':
description: Success
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: group-id
in: path
description: The unique identifier of group
required: true
schema:
type: string
x-ms-docs-key-type: group
- name: resourceSpecificPermissionGrant-id
in: path
description: The unique identifier of resourceSpecificPermissionGrant
required: true
schema:
type: string
x-ms-docs-key-type: resourceSpecificPermissionGrant
/groups/{group-id}/team/permissionGrants/$count:
description: Provides operations to count the resources in the collection.
get:
tags:
- Groups.team
summary: Microsoft Graph Get the number of the resource
operationId: groups.team.permissionGrants.GetCount-5668
parameters:
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
responses:
2XX:
$ref: '#/components/responses/ODataCountResponse'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
parameters:
- name: group-id
in: path
description: The unique identifier of group
required: true
schema:
type: string
x-ms-docs-key-type: group
/me/chats/{chat-id}/permissionGrants:
description: >-
Provides operations to manage the permissionGrants property of the
microsoft.graph.chat entity.
get:
tags:
- Me.chat
summary: Microsoft Graph Get permissionGrants from me
description: A collection of permissions granted to apps for the chat.
operationId: me.chats.ListPermissionGrants
parameters:
- $ref: '#/components/parameters/top'
- $ref: '#/components/parameters/skip'
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
- $ref: '#/components/parameters/count'
- name: $orderby
in: query
description: Order items by property values
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
$ref: >-
#/components/responses/microsoft.graph.resourceSpecificPermissionGrantCollectionResponse
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
x-ms-docs-operation-type: operation
post:
tags:
- Me.chat
summary: Microsoft Graph Create new navigation property to permissionGrants for me
operationId: me.chats.CreatePermissionGrants
requestBody:
description: New navigation property
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
required: true
responses:
2XX:
description: Created navigation property.
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: chat-id
in: path
description: The unique identifier of chat
required: true
schema:
type: string
x-ms-docs-key-type: chat
/me/chats/{chat-id}/permissionGrants/{resourceSpecificPermissionGrant-id}:
description: >-
Provides operations to manage the permissionGrants property of the
microsoft.graph.chat entity.
get:
tags:
- Me.chat
summary: Microsoft Graph Get permissionGrants from me
description: A collection of permissions granted to apps for the chat.
operationId: me.chats.GetPermissionGrants
parameters:
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
description: Retrieved navigation property
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
patch:
tags:
- Me.chat
summary: Microsoft Graph Update the navigation property permissionGrants in me
operationId: me.chats.UpdatePermissionGrants
requestBody:
description: New navigation property values
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
required: true
responses:
2XX:
description: Success
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
delete:
tags:
- Me.chat
summary: Microsoft Graph Delete navigation property permissionGrants for me
operationId: me.chats.DeletePermissionGrants
parameters:
- name: If-Match
in: header
description: ETag
schema:
type: string
responses:
'204':
description: Success
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: chat-id
in: path
description: The unique identifier of chat
required: true
schema:
type: string
x-ms-docs-key-type: chat
- name: resourceSpecificPermissionGrant-id
in: path
description: The unique identifier of resourceSpecificPermissionGrant
required: true
schema:
type: string
x-ms-docs-key-type: resourceSpecificPermissionGrant
/me/chats/{chat-id}/permissionGrants/$count:
description: Provides operations to count the resources in the collection.
get:
tags:
- Me.chat
summary: Microsoft Graph Get the number of the resource
operationId: me.chats.permissionGrants.GetCount-9e7e
parameters:
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
responses:
2XX:
$ref: '#/components/responses/ODataCountResponse'
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
parameters:
- name: chat-id
in: path
description: The unique identifier of chat
required: true
schema:
type: string
x-ms-docs-key-type: chat
/me/joinedTeams/{team-id}/permissionGrants:
description: >-
Provides operations to manage the permissionGrants property of the
microsoft.graph.team entity.
get:
tags:
- Me.team
summary: Microsoft Graph Get permissionGrants from me
description: A collection of permissions granted to apps to access the team.
operationId: me.joinedTeams.ListPermissionGrants
parameters:
- $ref: '#/components/parameters/top'
- $ref: '#/components/parameters/skip'
- $ref: '#/components/parameters/search'
- $ref: '#/components/parameters/filter'
- $ref: '#/components/parameters/count'
- name: $orderby
in: query
description: Order items by property values
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: query
description: Expand related entities
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
responses:
2XX:
$ref: >-
#/components/responses/microsoft.graph.resourceSpecificPermissionGrantCollectionResponse
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-pageable:
nextLinkName: '@odata.nextLink'
operationName: listMore
x-ms-docs-operation-type: operation
post:
tags:
- Me.team
summary: Microsoft Graph Create new navigation property to permissionGrants for me
operationId: me.joinedTeams.CreatePermissionGrants
requestBody:
description: New navigation property
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
required: true
responses:
2XX:
description: Created navigation property.
content:
application/json:
schema:
$ref: >-
#/components/schemas/microsoft.graph.resourceSpecificPermissionGrant
4XX:
$ref: '#/components/responses/error'
5XX:
$ref: '#/components/responses/error'
x-ms-docs-operation-type: operation
parameters:
- name: team-id
in: path
description: The unique identifier of team
required: true
schema:
type: string
x-ms-docs-key-type: team
/me/joinedTeams/{team-id}/permissionGrants/{resourceSpecificPermissionGrant-id}:
description: >-
Provides operations to manage the permissionGrants property of the
microsoft.graph.team entity.
get:
tags:
- Me.team
summary: Microsoft Graph Get permissionGrants from me
description: A collection of permissions granted to apps to access the team.
operationId: me.joinedTeams.GetPermissionGrants
parameters:
- name: $select
in: query
description: Select properties to be returned
style: form
explode: false
schema:
uniqueItems: true
type: array
items:
type: string
- name: $expand
in: q
# --- truncated at 32 KB (103 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/microsoft-graph/refs/heads/main/openapi/permissiongrants-openapi-original.yml