This document contains the MS Graph API calls used and examples of user consent prompts when configuring the Azure Active Directory sync for Workshop.
MS Graph API calls:
Microsoft Graph | openid | Sign users in | Delegated | Admin consent | An administrator |
Microsoft Graph | offline_access | Maintain access to data you have given it access to | Delegated | Admin consent | An administrator |
Microsoft Graph | profile | View users' basic profile | Delegated | Admin consent | An administrator |
Microsoft Graph | User.Read | Sign in and read user profile | Delegated | Admin consent | An administrator |
Microsoft Graph | User.Read.All | Read all users' full profiles | Delegated | Admin consent | An administrator |
Microsoft Graph | GroupMember.Read.All | Read all groups | Delegated | Admin consent | An administrator |
Microsoft Graph | OrgContact.Read.All | Read organizational contacts | Delegated | Admin consent | An administrator |
All Workshop MS Graph API calls are read only.