ESC
Type to search...

AgreementAcceptance.Read

Export JSON
Export CSV
Copy URL
Print
Delegated Read User Scope

Allows the app to read terms of use acceptance statuses on behalf of the signed-in user.

Delegated Access App-Only Access

Permission Details

Delegated Permission Admin consent required

Read user terms of use acceptance statuses

Allows the app to read terms of use acceptance statuses on behalf of the signed-in user.

Properties

Property Type Description
id string The unique identifier for an entity. Read-only.
userEmail stringNullable Email of the user when the acceptance was recorded.
expirationDateTime date-timeNullable The expiration date time of the acceptance. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Supports $filter (eq, ge, le) and eq for null values.
userPrincipalName stringNullable UPN of the user when the acceptance was recorded.
userId stringNullable ID of the user who accepted the agreement. Supports $filter (eq).
userDisplayName stringNullable Display name of the user when the acceptance was recorded.
deviceOSVersion stringNullable The operating system version of the device used for accepting the agreement.
deviceOSType stringNullable The operating system used for accepting the agreement.
recordedDateTime date-timeNullable The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Supports $filter (eq) and eq for null values.
agreementId stringNullable ID of the agreement.
state object The possible values are: accepted, declined. Supports $filter (eq).
agreementFileId stringNullable ID of the agreement file accepted by the user.
deviceDisplayName stringNullable The display name of the device used for accepting the agreement.
deviceId stringNullable The unique identifier of the device used for accepting the agreement. Supports $filter (eq) and eq for null values.

JSON Representation

JSON representation
{
  "id": "String",
  "userEmail": "String",
  "expirationDateTime": "String",
  "userPrincipalName": "String",
  "userId": "String",
  "userDisplayName": "String",
  "deviceOSVersion": "String",
  "deviceOSType": "String",
  "recordedDateTime": "String",
  "agreementId": "String",
  "state": "{...}",
  "agreementFileId": "String",
  "deviceDisplayName": "String",
  "deviceId": "String"
}

Relationships

Relationship Type Description
agreement agreement The agreement associated with this acceptance.

Graph Methods

Delegated access App-only access
Methods
GET /identityGovernance/termsOfUse/agreements/{agreementsId}/acceptances
GET /me/agreementAcceptances
GET /users/{id | userPrincipalName}/agreementAcceptances
Methods
GET /identityGovernance/termsOfUse/agreements/{agreementsId}/acceptances
GET /me/agreementAcceptances
GET /users/{id | userPrincipalName}/agreementAcceptances

Code Examples

C# / .NET SDK
// Install: dotnet add package Microsoft.Graph
// Install: dotnet add package Azure.Identity
using Microsoft.Graph;
using Azure.Identity;

// Delegated permissions - interactive user sign-in
var scopes = new[] { "AgreementAcceptance.Read" };
var options = new InteractiveBrowserCredentialOptions
{
    ClientId = "YOUR_CLIENT_ID",
    TenantId = "YOUR_TENANT_ID",
    RedirectUri = new Uri("http://localhost")
};
var credential = new InteractiveBrowserCredential(options);
var graphClient = new GraphServiceClient(credential, scopes);

// Example: GET /me
var result = await graphClient.Me.GetAsync();
Console.WriteLine($"User: {result?.DisplayName}");
JavaScript / TypeScript
// npm install @azure/msal-browser @microsoft/microsoft-graph-client
import { PublicClientApplication } from "@azure/msal-browser";
import { Client } from "@microsoft/microsoft-graph-client";
import { AuthCodeMSALBrowserAuthenticationProvider } from 
    "@microsoft/microsoft-graph-client/authProviders/authCodeMsalBrowser";

const msalConfig = {
    auth: {
        clientId: "YOUR_CLIENT_ID",
        authority: "https://login.microsoftonline.com/YOUR_TENANT_ID"
    }
};

const pca = new PublicClientApplication(msalConfig);
await pca.initialize();

// Delegated: Login with required scope
const loginResponse = await pca.loginPopup({
    scopes: ["AgreementAcceptance.Read"]
});

const authProvider = new AuthCodeMSALBrowserAuthenticationProvider(pca, {
    account: loginResponse.account,
    scopes: ["AgreementAcceptance.Read"],
    interactionType: "popup"
});

const graphClient = Client.initWithMiddleware({ authProvider });

// Example: GET /me
const result = await graphClient.api("/me").get();
console.log(result);
PowerShell
# Install Microsoft Graph PowerShell module
Install-Module Microsoft.Graph -Scope CurrentUser

# Delegated access - interactive sign-in
Connect-MgGraph -Scopes "AgreementAcceptance.Read"

# Verify connection
Get-MgContext | Select-Object Account, TenantId, Scopes

# Example: GET /me
$result = Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/me"
$result | ConvertTo-Json -Depth 5


# Always disconnect when done
Disconnect-MgGraph
Python
# pip install msgraph-sdk azure-identity
from azure.identity import InteractiveBrowserCredential, ClientSecretCredential
from msgraph import GraphServiceClient
import asyncio

# Delegated permissions - interactive browser sign-in
credential = InteractiveBrowserCredential(
    client_id="YOUR_CLIENT_ID",
    tenant_id="YOUR_TENANT_ID"
)
scopes = ["AgreementAcceptance.Read"]
client = GraphServiceClient(credential, scopes)

async def get_data():
    # Example: GET /me
    result = await client.me.get()
    print(f"User: {result.display_name}")
    return result

asyncio.run(get_data())

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Delegated permissions and search for AgreementAcceptance.Read

4

Grant Admin Consent

This permission requires admin consent. Grant consent in the Azure portal.