Microsoft Entra
Review the minimum OAuth scopes for every Microsoft Entra action.
Review the minimum standard delegated scope mapping for every Microsoft Entra action. The mapping covers directory users, groups, group members, and manager lookup. Sites.Selected does not apply.
Minimal scopes per action
Action Description Minimum scopes
Get manager Gets the direct manager of a user. User.Read.All
Resolve group Resolves a group in the directory. GroupMember.Read.All
Search group members Lists user members of a group, including profile fields and optional manager. GroupMember.Read.AllUser.Read.All
Search groups Searches groups in the directory. GroupMember.Read.All
Search users Searches users in the directory. User.Read.All