| Name | microsoft.directory/servicePrincipals/managePermissionGrantsForAll.microsoft-application-admin | ||
|---|---|---|---|
| Description |
Grant consent for application permissions and delegated permissions on behalf of any user or all users, except for application permissions for Microsoft Graph and Azure AD Graph Grant consent to delegated permissions on behalf of any user or all users |
||
| Id(s) | microsoft.directory-servicePrincipals-managePermissionGrantsForAll.microsoft-application-admin microsoft.directory-servicePrincipals-managePermissionGrantsForAll.microsoft-application-admin-post |
||
| isPrivileged | false | ||
| EntraOps Tier Level | ControlPlane | ||
| EntraOps Service | Application and Workload Identity | ||
| #Operations | 2 | ||
| #Used by roles | 2 | ||
| #Used by roles under condition | 0 | ||
| Used by roles | Application Administrator 9b895d92-2cd3-44c7-9d02-a6ac2d5ea5c3 (applicability: direct) Cloud Application Administrator 158c047a-c907-4556-b7ef-446551a6b5f7 (applicability: direct) |
||
| resourceAction Consent Policy Id | microsoft-application-admin | ||
| resourceAction Consent Policy Info | Application Admin Policy exclude: Microsoft Graph (00000003-0000-0000-c000-000000000000) for application exclude: Windows Azure Active Directory (00000002-0000-0000-c000-000000000000) for application |
||
| JSON enriched |
|
||
| JSON raw |
|