Configure Microsoft Entra ID API permissions
- Last UpdatedJan 20, 2025
- 1 minute read
To configure Microsoft Entra ID API permissions:
When you configure and register your app, it only has limited permissions granted. You must add additional permissions manually.
-
From the resource menu on the left pane, select API Permissions.
The Microsoft Graph API displays only User.Read permissions.

-
Select Microsoft Graph.
The Request API permissions pane opens.
-
Application permissions: At the top of pane, under the question "What type of permissions does your application require?," select Application permissions.
-
To choose permissions, type the first few letters of the following permissions in the Select permissions text box until the applicable permissions group appears. Then, expand the permissions group and select the matching permission to enable it.
-
GroupMember.Read.All
-
Organization.Read.All
-
User.Read.All
-
-
Select Update permissions.
-
Select Grant admin consent for <tenant name>.
All configured permissions you added in the previous step should now be listed, as shown below.
