Configure Microsoft Entra ID API permissions
- Last UpdatedApr 16, 2026
- 1 minute read
To configure Microsoft Entra ID API permissions:
When you configure and register your application, it is granted limited permissions. You must add additional permissions manually.
-
From the resource menu on the left pane, select API Permissions.
The Microsoft Graph API displays only User.Read permissions.
-
Select Microsoft Graph.
The Request API permissions pane opens.
-
At the top of pane, under What type of permissions does your application require?, select Application permissions.
-
In the Select permissions box, search for and add the following permissions:
-
GroupMember.Read.All
-
Organization.Read.All
-
User.Read.All
-
-
Select Update permissions.
-
Select Grant admin consent for <tenant name>.
All configured permissions you added in the previous step should now be listed, as shown below.
