ESC
Type to search...

AgentCollection.ReadWrite.Global

Export JSON
Export CSV
Copy URL
Print
Delegated Read/Write User Scope

Allows the app to read and update global collection and manage its membership in your organization's Agent Registry on behalf of the signed-in user.

Delegated Access App-Only Access

Permission Details

Delegated Permission Admin consent required

Read and write global collection in Agent Registry

Allows the app to read and update global collection and manage its membership in your organization's Agent Registry on behalf of the signed-in user.

Properties

Property Type Description
id string The unique identifier for an entity. Read-only.
lastModifiedDateTime date-timeNullable Timestamp of last update.
ownerIds array List of object IDs for the owners of the agent instance.
description stringNullable Description / purpose of the collection.
createdBy stringNullable Object ID of the user or app that created the agent instance.
members microsoft.graph.agentInstance collection List of agent instances that are members of this collection. Supports $expand.
managedBy stringNullable appId (referred to as Application (client) ID on the Microsoft Entra admin center) of the service principal managing this agent.
createdDateTime date-timeNullable Timestamp when agent collection was created.
originatingStore stringNullable Source system/store where the collection originated. For example Copilot Studio.
displayName string Friendly name of the collection.

JSON Representation

JSON representation
{
  "id": "String",
  "lastModifiedDateTime": "String",
  "ownerIds": "array",
  "description": "String",
  "createdBy": "String",
  "members": "[...]",
  "managedBy": "String",
  "createdDateTime": "String",
  "originatingStore": "String",
  "displayName": "String"
}

Graph Methods

Delegated access App-only access

No API methods available for this version.

Methods
GET /agentRegistry/agentCollections/{agentCollectionId}
PATCH /agentRegistry/agentCollections/{agentCollectionId}

No PowerShell cmdlets available for this version.

No PowerShell cmdlets available for this version.

Code Examples

C# / .NET SDK
// Install: dotnet add package Microsoft.Graph
// Install: dotnet add package Azure.Identity
using Microsoft.Graph;
using Azure.Identity;

// Delegated permissions - interactive user sign-in
var scopes = new[] { "AgentCollection.ReadWrite.Global" };
var options = new InteractiveBrowserCredentialOptions
{
    ClientId = "YOUR_CLIENT_ID",
    TenantId = "YOUR_TENANT_ID",
    RedirectUri = new Uri("http://localhost")
};
var credential = new InteractiveBrowserCredential(options);
var graphClient = new GraphServiceClient(credential, scopes);

// Example: GET /me
var result = await graphClient.Me.GetAsync();
Console.WriteLine($"User: {result?.DisplayName}");
JavaScript / TypeScript
// npm install @azure/msal-browser @microsoft/microsoft-graph-client
import { PublicClientApplication } from "@azure/msal-browser";
import { Client } from "@microsoft/microsoft-graph-client";
import { AuthCodeMSALBrowserAuthenticationProvider } from 
    "@microsoft/microsoft-graph-client/authProviders/authCodeMsalBrowser";

const msalConfig = {
    auth: {
        clientId: "YOUR_CLIENT_ID",
        authority: "https://login.microsoftonline.com/YOUR_TENANT_ID"
    }
};

const pca = new PublicClientApplication(msalConfig);
await pca.initialize();

// Delegated: Login with required scope
const loginResponse = await pca.loginPopup({
    scopes: ["AgentCollection.ReadWrite.Global"]
});

const authProvider = new AuthCodeMSALBrowserAuthenticationProvider(pca, {
    account: loginResponse.account,
    scopes: ["AgentCollection.ReadWrite.Global"],
    interactionType: "popup"
});

const graphClient = Client.initWithMiddleware({ authProvider });

// Example: GET /me
const result = await graphClient.api("/me").get();
console.log(result);
PowerShell
# Install Microsoft Graph PowerShell module
Install-Module Microsoft.Graph -Scope CurrentUser

# Delegated access - interactive sign-in
Connect-MgGraph -Scopes "AgentCollection.ReadWrite.Global"

# Verify connection
Get-MgContext | Select-Object Account, TenantId, Scopes

# Example: GET /me
$result = Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/me"
$result | ConvertTo-Json -Depth 5


# Always disconnect when done
Disconnect-MgGraph
Python
# pip install msgraph-sdk azure-identity
from azure.identity import InteractiveBrowserCredential, ClientSecretCredential
from msgraph import GraphServiceClient
import asyncio

# Delegated permissions - interactive browser sign-in
credential = InteractiveBrowserCredential(
    client_id="YOUR_CLIENT_ID",
    tenant_id="YOUR_TENANT_ID"
)
scopes = ["AgentCollection.ReadWrite.Global"]
client = GraphServiceClient(credential, scopes)

async def get_data():
    # Example: GET /me
    result = await client.me.get()
    print(f"User: {result.display_name}")
    return result

asyncio.run(get_data())

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Delegated permissions and search for AgentCollection.ReadWrite.Global

4

Grant Admin Consent

This permission requires admin consent. Grant consent in the Azure portal.