Introduction

This blog is meant to help users who need to get the Windows Azure Active Directory Permissions (WAAD) Globally Unique Identifiers (GUIDs) in order to create AAD Applications using the Microsoft Graph API, or for other reasons where they just need to get the GUID for a certain WAAD permission. For further information regarding AAD permissions please refer to the blog post : https://blogs.msdn.microsoft.com/aaddevsup/2018/05/21/finding-the-correct-permissions-for-a-microsoft-or-azure-active-directory-graph-call/

 

Note: That these GUIDs are subject to change in the future and may not be the same anymore.

Table

The Resource App ID for the Windows Azure Active Directory is : 00000002-0000-0000-c000-000000000000

GUID of Permission Permission
5778995a-e1bf-45b8-affa-663a9f3f4d04

Type : Role

Read directory data
abefe9df-d5a9-41c6-a60b-27b38eac3efb

Type : Role

Read and write domains
78c8a3c8-a07e-4b9e-af1b-b5ccab50a175

Type : Role

Read and write directory data
1138cb37-bd11-4084-a2b7-9f71582aeddb

Type : Role

Read and write devices
9728c0c4-a06b-4e0e-8d1b-3d694e8ec207

Type : Role

Read all hidden memberships
824c81eb-e3f8-4ee6-8f6d-de7f50d565b7

Type : Role

Manage apps that this app creates or owns
1cda74f2-2616-4834-b122-5cb1b07f8a59

Type : Role

Read and write all applications
aaff0dfd-0295-48b6-a5cc-9f465bc87928

Type : Role

Read and write domains
a42657d6-7f20-40e3-b6f0-cee03008a62a

Type : Scope

Access the directory as the signed-in user
5778995a-e1bf-45b8-affa-663a9f3f4d04

Type : Scope

Read directory data
78c8a3c8-a07e-4b9e-af1b-b5ccab50a175

Type : Scope

Read and write directory data
970d6fa6-214a-4a9b-8513-08fad511e2fd

type: Scope

Read and write all groups
6234d376-f627-4f0f-90e0-dff25c5211a3
type: Scope
Read all groups
c582532d-9d9e-43bd-a97c-2667a28ce295
type: Scope
Read all users’ full profiles
cba73afc-7f69-4d86-8450-4978e04ecd1a
type: Scope
Read all users’ basic profiles
311a71cc-e848-46a1-bdf8-97ff7156d8e6
type: Scope
Sign in and read user profile
2d05a661-f651-4d57-a595-489c91eda336
type: Scope
Read hidden memberships

 

Conclusion

If you have anymore issues in regards to this please file a support ticket and one of our support engineers will reach out to you to resolve the issue. Please include a fiddler trace of a repro of the issue occurring as well as a summary of the expected behavior versus the current behavior.

Leave a Comment