Policy.Read.All
ConsentRequest.Read.All
— application permissions, granted to the app registration with admin consent.
Endpoints:
GET /v1.0/policies/authorizationPolicy · GET /v1.0/policies/adminConsentRequestPolicy · GET /v1.0/identityGovernance/appConsent/appConsentRequests
What has already been consented is in the OAuth Consent Grants report; this page is about what users are allowed to do next.
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
App Consent Policy Posture
Can an ordinary user hand a third-party app access to their mailbox and files? Who can invite guests, and what can guests see? These tenant-wide settings decide how far a single phishing click can go.
No authorization policy was returned. Please contact support if this is not the expected result.