How to revoke DelegatedPermissionGrant.ReadWrite.All and Directory.ReadWrite.All permissions in Microsoft Graph?

Microsoft Graph is a powerful tool that allows you to access and manage data from various Microsoft services, such as Office 365, Azure Active Directory, and more. When using Microsoft Graph, you may need to grant certain permissions to your application in order to access specific resources. However, there may be instances where you need to revoke these permissions. In this article, we will discuss how to revoke the DelegatedPermissionGrant.ReadWrite.All and Directory.ReadWrite.All permissions in Microsoft Graph.

Revoke DelegatedPermissionGrant.ReadWrite.All

The DelegatedPermissionGrant.ReadWrite.All permission allows an application to read and write delegated permission grants on behalf of users. To revoke this permission, follow these steps:

1. Open the Azure portal (https://portal.azure.com) and sign in with your Azure AD administrator account.
2. In the left-hand menu, select "Azure Active Directory".
3. Under "Manage", select "App registrations".
4. Find and select your application from the list.
5. In the application's overview page, select "API permissions".
6. Under "Delegated permissions", find the "DelegatedPermissionGrant.ReadWrite.All" permission and click on the trash bin icon to remove it.
7. Click "Save" to apply the changes.

Revoke Directory.ReadWrite.All

The Directory.ReadWrite.All permission allows an application to read and write directory data in your organization's Azure Active Directory. To revoke this permission, follow these steps:

1. Open the Azure portal (https://portal.azure.com) and sign in with your Azure AD administrator account.
2. In the left-hand menu, select "Azure Active Directory".
3. Under "Manage", select "App registrations".
4. Find and select your application from the list.
5. In the application's overview page, select "API permissions".
6. Under "Application permissions", find the "Directory.ReadWrite.All" permission and click on the trash bin icon to remove it.
7. Click "Save" to apply the changes.

After following these steps, the specified permissions will be revoked for your application. It is important to note that revoking these permissions may affect the functionality of your application, as it may no longer have the necessary access to certain resources. Make sure to review the impact of revoking these permissions before proceeding.

Conclusion

In this article, we discussed how to revoke the DelegatedPermissionGrant.ReadWrite.All and Directory.ReadWrite.All permissions in Microsoft Graph. We provided step-by-step instructions on how to remove these permissions from your application using the Azure portal. Remember to carefully consider the impact of revoking these permissions on your application's functionality.

References