Directory.Read.All
Application.Read.All
— application permissions, granted to the app registration with admin consent.
Endpoint:
GET /v1.0/oauth2PermissionGrants
Directory.Read.All reads the grants; Application.Read.All is only used to turn client and resource GUIDs into application names.
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
OAuth Consent Grants
Delegated permissions that have been consented to applications in this tenant - who granted them,
to which application, and over which resource. Tenant-wide grants apply to every user at once.
Source: Microsoft Graph oauth2PermissionGrants.
No delegated consent grants were found. Please contact support if this is not the expected result.