ESC
Type to search...
↑↓ Navigate ↵ Open ESC Close

APIConnectors.ReadWrite.All

Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated Read/Write All Resources

Allows the app to read, create and manage the API connectors used in user authentication flows, without a signed-in user.

Permission data: April 6, 2026 at 4:06 AM UTC
Delegated Access App-Only Access

Permission Details

Application Permission

Read and write API connectors for authentication flows

Allows the app to read, create and manage the API connectors used in user authentication flows, without a signed-in user.

Permission ID: 1dfe531a-24a6-4f1b-80f4-7a0dc5a0a171
Delegated Permission Admin consent required

Read and write API connectors for authentication flows

Allows the app to read, create and manage the API connectors used in user authentication flows, on behalf of the signed-in user.

User sees: Allows the app to read, create and manage the API connectors used in user authentication flows, on your behalf.
Permission ID: c67b52c5-7c69-48b6-9d48-7b3af3ded914

Properties

Microsoft Graph v1.0 endpoint-derived-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property Type Description
displayName StringNullable The display name of the identity., , For drive items, the display name might not always be available or up to date. For example, if a user changes their display name the API might show the new value in a future response, but the items associated with the user don't show up as changed when using delta.
id StringNullable Unique identifier for the identity or actor. For example, in the access reviews decisions API, this property might record the id of the principal, that is, the group, user, or application that's subject to review.
tenantId String Unique identity of the tenant. Optional.
thumbnails thumbnailSet Keyed collection of thumbnail resources. Optional. Applies to drive items, for example.

JSON Representation

Microsoft Graph v1.0 endpoint-derived-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation 
{
  "displayName": "String",
  "id": "String (identifier)",
  "tenantId": "String",
  "thumbnails": {
    "@odata.type": "microsoft.graph.thumbnailSet"
  }
}

Relationships

Relationships metadata is not available for this permission mapping.

View resource documentation

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /identity/apiConnectors/
GET /identity/apiConnectors/{identityApiConnectorId}
POST /identity/apiConnectors
POST /identity/apiconnectors/{id}/uploadClientCertificate
PATCH /identity/apiConnectors/{identityApiConnectorId}
DELETE /identity/apiConnectors/{identityApiConnectorId}
Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /identity/apiConnectors/
GET /identity/apiConnectors/{identityApiConnectorId}
POST /identity/apiConnectors
POST /identity/apiconnectors/{id}/uploadClientCertificate
PATCH /identity/apiConnectors/{identityApiConnectorId}
DELETE /identity/apiConnectors/{identityApiConnectorId}
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgIdentityApiConnector /identity/apiConnectors/
List identityApiConnectors
Get-MgIdentityApiConnector /identity/apiConnectors/{identityApiConnectorId}
Get identityApiConnector
Invoke-MgUploadIdentityApiConnectorClientCertificate /identity/apiconnectors/{id}/uploadClientCertificate
identityApiConnector: uploadClientCertificate
New-MgIdentityApiConnector /identity/apiConnectors
Create identityApiConnector
Remove-MgIdentityApiConnector /identity/apiConnectors/{identityApiConnectorId}
Delete identityApiConnector
Update-MgIdentityApiConnector /identity/apiConnectors/{identityApiConnectorId}
Update identityApiConnector
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgBetaIdentityApiConnector /identity/apiConnectors/
List identityApiConnectors
Get-MgBetaIdentityApiConnector /identity/apiConnectors/{identityApiConnectorId}
Get identityApiConnector
Invoke-MgBetaUploadIdentityApiConnectorClientCertificate /identity/apiconnectors/{id}/uploadClientCertificate
identityApiConnector: uploadClientCertificate
New-MgBetaIdentityApiConnector /identity/apiConnectors
Create identityApiConnector
Remove-MgBetaIdentityApiConnector /identity/apiConnectors/{identityApiConnectorId}
Delete identityApiConnector
Update-MgBetaIdentityApiConnector /identity/apiConnectors/{identityApiConnectorId}
Update identityApiConnector

Code Examples

C# / .NET SDK
Create identityApiConnector
View official example on Microsoft Learn
// Code snippets are only available for the latest version. Current version is 5.x

// Dependencies
using Microsoft.Graph.Models;

var requestBody = new IdentityApiConnector
{
	DisplayName = "Test API",
	TargetUrl = "https://someapi.com/api",
	AuthenticationConfiguration = new BasicAuthentication
	{
		OdataType = "#microsoft.graph.basicAuthentication",
		Username = "MyUsername",
		Password = "MyPassword",
	},
};

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Identity.ApiConnectors.PostAsync(requestBody);
JavaScript
Create identityApiConnector
View official example on Microsoft Learn
const options = {
	authProvider,
};

const client = Client.init(options);

const identityApiConnector = {
    displayName: 'Test API',
    targetUrl: 'https://someapi.com/api',
    authenticationConfiguration: {
      '@odata.type':'#microsoft.graph.basicAuthentication',
      username: 'MyUsername',
      password: 'MyPassword'
    }
};

await client.api('/identity/apiConnectors')
	.post(identityApiConnector);
PowerShell
Create identityApiConnector
View official example on Microsoft Learn
Import-Module Microsoft.Graph.Identity.SignIns

$params = @{
	displayName = "Test API"
	targetUrl = "https://someapi.com/api"
	authenticationConfiguration = @{
		"@odata.type" = "#microsoft.graph.basicAuthentication"
		username = "MyUsername"
		password = "MyPassword"
	}
}

New-MgIdentityApiConnector -BodyParameter $params
Python
Create identityApiConnector
View official example on Microsoft Learn
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
from msgraph.generated.models.identity_api_connector import IdentityApiConnector
from msgraph.generated.models.basic_authentication import BasicAuthentication
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = IdentityApiConnector(
	display_name = "Test API",
	target_url = "https://someapi.com/api",
	authentication_configuration = BasicAuthentication(
		odata_type = "#microsoft.graph.basicAuthentication",
		username = "MyUsername",
		password = "MyPassword",
	),
)

result = await graph_client.identity.api_connectors.post(request_body)

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for APIConnectors.ReadWrite.All

4

Grant Admin Consent

Application permissions always require admin consent.