This document contains the MS Graph API calls used and examples of user consent prompts when configuring the Azure Active Directory sync for Workshop.
MS Graph API calls:
Microsoft Graph
|
openid
|
Sign users in
|
Delegated
|
Admin consent
|
An administrator
|
Microsoft Graph
|
offline_access
|
Maintain access to data you have given it access to
|
Delegated
|
Admin consent
|
An administrator
|
Microsoft Graph
|
profile
|
View users' basic profile
|
Delegated
|
Admin consent
|
An administrator
|
Microsoft Graph
|
User.Read
|
Sign in and read user profile
|
Delegated
|
Admin consent
|
An administrator
|
Microsoft Graph
|
User.Read.All
|
Read all users' full profiles
|
Delegated
|
Admin consent
|
An administrator
|
Microsoft Graph
|
Group.Read.All
|
Read all groups
|
Delegated
|
Admin consent
|
An administrator
|
Microsoft Graph
|
OrgContact.Read.All
|
Read organizational contacts
|
Delegated
|
Admin consent
|
An administrator
|
All Workshop MS Graph API calls are read only.