Hello On the documentation about Azure AD . There is a part about permissions. I would like to know when two “Permissions” are required? After reading Microsoft Graph permissions reference this is still no clear why those 2 permissions are required : Directory.AccessAsUser.All because documentat…

Ok. After reading the Microsoft documentation. Directory.Read.All is not enough to get group. user resource do not include groups. To get groups you need other permissions . For “Delegated”: GroupMember.Read.All, Group.Read.All, Directory.Read.All, Group.ReadWrite.All, Directory.ReadWrite.All, D…

More precisions about why 2 extrat permissions are needed with Azure AD connection

Get Help

konrad.sopala November 26, 2021, 4:37pm 3

Thanks for sharing that with the rest of community!

Topic		Replies	Views
Why Read Directory permission is absolutely required for Azure AD connection? Get Help azure-ad	7	6296	April 18, 2020
Azure AD Does Not Require "Directory.Read.All" Access Privileges Knowledge Articles	1	919	January 23, 2024
Connect Your App to Microsoft Azure Active Directory without Directory.Read.All and instead Group.Read.All or GroupMember.Read.All Get Help user-profile , user-management	4	34	August 12, 2025
Is Read Directory permission absolutely required for Azure AD connection? Get Help azure-ad	2	4349	September 6, 2018
Minimum required permissions in Entra to be able to use Microsoft Azure AD Enterprise Connection? Get Help user-management , account-linking	5	101	February 19, 2025

More precisions about why 2 extrat permissions are needed with Azure AD connection

Related topics