Connect Your App to Microsoft Azure Active Directory without Directory.Read.All and instead Group.Read.All or GroupMember.Read.All

As per documentation “Connect Your App to Microsoft Azure Active Directory”, it expects Directory.Read.All permission to connect Your App to Microsoft Azure Active Directory but is there any way we can use Group.Read.All or GroupMember.Read.All. Any Help is appreciated.

Hi @bidyutkumar.mondal

Welcome to the Auth0 Community!

As mentioned in this knowledge article, the Directory.Read.All permission is not strictly necessary. You should be able to set up and use the connection with the User.Read permission and any other ones you deem necessary for your implementation.

If you have any other questions, let me know!

Kind Regards,
Nik

@nik.baleca Thanks. So based on my needs I should be able to use the combinations of permission mentioned in Graph documentation Microsoft Graph permissions reference in conjunction with Auth0.

Yes, that is right!

Since the permissions are being configured on the Azure AD’s application side, you should be able to use any combination of permissions available there without having to provide the Directory.Read.All permission.

Kind Regards,
Nik

Awesome and thanks for your time and response.