#API Permission Update History

#October 2023

Insider Release Date: September 22, 2023

General Availability Date for the Commercial Environment: October 8, 2023

General Availability Date for the U.S. Government Environment: October 15, 2023

API Name	Permission	Type	Note
Power BI Service	Tenant.ReadWrite.All(Read and write all content in tenant)	Delegated	Newly added.This permission is used to update Power BI workspace roles.
Power BI Service	Workspace.ReadWrite.All(Read and write all workspaces)	Delegated	Newly added.This permission is used to delete Power BI workspaces.

#August 2023

Insider Release Date: July 21, 2023

General Availability Date for the Commercial Environment: August 6, 2023

General Availability Date for the U.S. Government Environment: August 13, 2023

API Name	Permission	Type	Note
Dynamics CRM	user_impersonation(Access Common Data Service as organization users)	Delegated	Newly added.This permission used to manage Power Platform environments and Power Apps.

#June 2023

Insider Release Date: May 26, 2023

General Availability Date for the Commercial Environment: June 11, 2023

General Availability Date for the U.S. Government Environment: June 18, 2023

API Name	Permission	Type	Note
Microsoft Graph	Group.ReadWrite.All(Read and write all groups)	Delegated	Newly added.This permission used for the Create Microsoft 365 Group service in dynamic services. It is required if you want to allow outside senders to Microsoft 365 Groups.
Microsoft Graph	Policy.Read.All(Read your organization's policies)	Application	Newly added. This permission is required to manage shared channel members during the renewal process.
Office 365 Exchange Online	Exchange.ManageAsApp (Manage Exchange As Application)	Application	Newly added.This permission is required to create and manage distribution groups, mail-enabled security groups, and shared mailboxes.The Exchange administrator role is also required to be assigned to the custom app.
Yammer	user_impersonation(Read and write to the Yammer platform [preview])	Delegated	Newly added. This permission is required by the custom Viva Engage app and used to access and manage the Viva Engage communities.
PowerApps Service	User(Access the PowerApps Service API)	Delegated	Newly added.This permission is required to retrieve the information of Power Apps.

#September 2022

Insider Release Date: August 19, 2022

General Availability Date for the Commercial Environment: September 4, 2022

General Availability Date for the U.S. Government Environment: September 11, 2022

API Name	Permission	Type	Note
Microsoft Graph	TeamMember.ReadWrite.All (Add and remove members from all teams)	Application	Newly added.This permission is used for the Create team service in dynamic services and the team renewal profile. It is required to add or remove members from teams.

#July 2022

Insider Release Date: June 17, 2022

General Availability Date for the Commercial Environment: July 3, 2022

General Availability Date for the U.S. Government Environment: July 10, 2022

API Name	Permission	Type	Note
Microsoft Graph	Channel.Delete.All (Delete channels)	Application	Newly added.This permission is required to delete private channels during the renewal process.

#May 2022

Insider Release Date: April 22, 2022

General Availability Date for the Commercial Environment: May 8, 2022

General Availability Date for the U.S. Government Environment: May 15, 2022

API Name	Permission	Type	Note
Microsoft Graph	TeamSettings.ReadWrite.All (Read and change all teams' settings)	Application	Newly added.This permission is required to update team settings.
Microsoft Graph	Team.Create (Create teams)	Application	Newly added.This permission is required if you allow your tenant users to create teams from an existing teams or using team templates.
Microsoft Graph	ChannelMessage.Read.All(Read all channel messages)	Application	Newly added.This permission is required to retrieve Microsoft Teams channel conversations for team inactivity threshold calculation.

#March 2022

Insider Release Date: February 18, 2022

General Availability Date for the Commercial Environment: March 6, 2022

General Availability Date for the U.S. Government Environment: March 13, 2022

API Name	Permission	Type	Note
Microsoft Graph	Channel.Create(Create channels)	Application	Newly added.This permission is required if you want to allow your tenant users to create private channels in Microsoft Teams.
Microsoft Graph	ChannelSettings.ReadWrite.All(Read and write the names, descriptions, and settings of all channels)	Application	Newly added.This permission is required if you want to allow your tenant users to update private channel properties in Microsoft Teams.

#November 2021

Insider Release Date: October 22, 2021

General Availability Date for the Commercial Environment: November 7, 2021

General Availability Date for the U.S. Government Environment: November 14, 2021

API Name	Permission	Type	Note
Microsoft Graph	ChannelMember.ReadWrite.All(Add and remove members from all channels)	Application	Newly added.This permission is required to add members to private channels in Microsoft Teams.

#September 2021

Insider Release Date: August 20, 2021

General Availability Date for the Commercial Environment: September 5, 2021

General Availability Date for the U.S. Government Environment: September 12, 2021

API Name	Permission	Type	Note
Microsoft Graph	InformationProtectionPolicy.Read.All(Read all published labels and label policies for an organization.)	Application	Newly added.This permission is required if you want to allow your tenant users to apply sensitivity labels to site collections, Microsoft 365 Groups, and Microsoft Teams.

#May 2021

Insider Release Date: April 23, 2021

General Availability Date for the Production Environment: May 9, 2021

API Name	Permission	Type	Note
Microsoft Graph	AuditLog.Read.All(Read all audit log data)	Application	Newly added.This permission is required if you need to specify the $Guest inviter role as the primary or secondary contact when configuring the automatic import profiles for guest users in the modern Cloud Governance admin center.

#March 2021

Insider Release Date: February 26, 2021

General Availability Date for the Production Environment: March 14, 2021

API Name	Permission	Type	Note
Microsoft Graph	Mail.Send(Send mail as any user)	Application	Newly added.This permission is required if you need to specify a specific Microsoft 365 account as the email sender when configuring Email settings in the modern Cloud Governance admin center.

#January 2021

Insider Release Date: December 25, 2020

General Availability Date for the Production Environment: January 10, 2021

API Name	Permission	Type	Note
Microsoft Graph	User.Read.All(Read all users’ full profiles)	Application	Newly added.This permission is required when you search for users in the people picker.
Microsoft Graph	User.Invite.All(Invite guest users to the organization)	Application	Newly added.This permission is required when your organization wants to manage guest user permission in the Manage Permissions service requests.
Microsoft Graph	Member.Read.Hidden(Read all hidden memberships)	Application	Replaced Azure Active Directory Graph API application permission Member.Read.Hidden with this permission. It is required by the Create Group/Team services and requests.
Microsoft Graph	Group.ReadWrite.All(Read and write all groups)	Application	Replaced Azure Active Directory Graph API delegated permission Group.ReadWrite.All with this permission. It is required by the Create Group/Team services and requests.