Skip to main content

entra app permission list

Lists the application and delegated permissions for a specified Entra Application Registration

Usage​

m365 entra app permission list [options]

Options​

-i, --appId [appId]

Client ID of the Entra application registration to retrieve the permissions for. Specify either appId, appName or appObjectId.

-n, --appName [appName]

Display name of the Entra application registration to add the API permissions to. Specify either appId, appName or appObjectId.

--appObjectId [appObjectId]

Object ID of the Entra application registration to retrieve the permissions for. Specify either appId, appName or appObjectId.

--type [type]

The type of permissions to retrieve. Allowed values: delegated, application, all. Defaults to all.

-h, --help [help]

Output usage information. Optionally, specify which section of command's help you want to see. Allowed values are options, examples, remarks, response, full. Default is options.

--query [query]

JMESPath query string. See http://jmespath.org/ for more information and examples.

-o, --output [output]

Output type. json, text, csv, md, none. Default json.

--verbose

Runs command with verbose logging.

--debug

Runs command with debug logging.

Remarks​

For best performance use the objectId option to reference the Entra application registration to get. If you use appId, this command will first need to find the corresponding object ID for that application.

Examples​

Retrieves all permissions for an Entra application registration specified by client id.

m365 entra app permission list --appId 'f1417aa3-bf0b-4cc5-a845-a0b2cf11f690'

Retrieves all permissions for an Entra application registration by specified by app display name.

m365 entra app permission list --appName 'Contoso App'

Retrieves all delegated permissions for an Entra application registration specified by object id.

m365 entra app permission list --appObjectId '64381cda-d40d-4fb0-bce2-bece391546a2' --type delegated

Response​

[
  {
    "resource": "Microsoft Graph",
    "resourceId": "00000003-0000-0000-c000-000000000000",
    "permission": "User.Read",
    "type": "Delegated"
  }
]
CTRL + M