ESC
Type to search...

ChatMember.ReadWrite.All

Export JSON
Export CSV
Copy URL
Print
Application Read/Write All Resources

Add and remove members from all chats, without a signed-in user.

Delegated Access App-Only Access

Permission Details

Application Permission

Add and remove members from all chats

Add and remove members from all chats, without a signed-in user.

Properties

Property Type Description
id string The unique identifier for an entity. Read-only.
members microsoft.graph.conversationMember collection A collection of all the members in the chat. Nullable.
createdBy object The user or application that created the chat. Read-only.
pinnedMessages microsoft.graph.pinnedChatMessageInfo collection A collection of all the pinned messages in the chat. Nullable.
installedApps microsoft.graph.teamsAppInstallation collection A collection of all the apps in the chat. Nullable.
createdDateTime date-timeNullable Date and time at which the chat was created. Read-only.
onlineMeetingInfo object Represents details about an online meeting. If the chat isn't associated with an online meeting, the property is empty. Read-only.
lastMessagePreview object Preview of the last message sent in the chat. Null if no messages are sent in the chat. Currently, only the list chats operation supports this property.
messages microsoft.graph.chatMessage collection A collection of all the messages in the chat. Nullable.
permissionGrants microsoft.graph.resourceSpecificPermissionGrant collection A collection of permissions granted to apps for the chat.
tenantId stringNullable The identifier of the tenant in which the chat was created. Read-only.
operations microsoft.graph.teamsAsyncOperation collection A collection of all the Teams async operations that ran or are running on the chat. Nullable.
lastUpdatedDateTime date-timeNullable Date and time at which the chat was renamed or list of members were last changed. Read-only.
webUrl stringNullable The URL for the chat in Microsoft Teams. The URL should be treated as an opaque blob, and not parsed. Read-only.
tabs microsoft.graph.teamsTab collection A collection of all the tabs in the chat. Nullable.

Showing 15 of 19 properties. View all on Microsoft Learn →

Graph Methods

Delegated access App-only access
Methods
GET /chats/{chat-id}/members
GET /chats/{chat-id}/members/{membership-id}
GET /chats/{id}/members
GET /subscriptions
GET /subscriptions/{id}
GET /users/{user-id | user-principal-name}/chats/{chat-id}/members
GET /users/{user-id | user-principal-name}/chats/{chat-id}/members/{membership-id}
POST /chats/{chat-id}/members
POST /subscriptions
POST /subscriptions/{subscriptionsId}/reauthorize
PATCH /subscriptions/{id}
DELETE /chats/{chat-id}/members/{membership-id}
DELETE /subscriptions/{subscription-id}
Methods
GET /chats/{chat-id}/members
GET /chats/{chat-id}/members/{membership-id}
GET /subscriptions
GET /subscriptions/{id}
GET /subscriptions/getVapidPublicKey
GET /users/{user-id | user-principal-name}/chats/{chat-id}/members
GET /users/{user-id | user-principal-name}/chats/{chat-id}/members/{membership-id}
POST /chats/{chat-id}/members
POST /subscriptions
POST /subscriptions/{subscriptionsId}/reauthorize
PATCH /subscriptions/{id}
DELETE /chats/{chat-id}/members/{membership-id}
DELETE /subscriptions/{subscription-id}

Code Examples

C# / .NET SDK
// Install: dotnet add package Microsoft.Graph
// Install: dotnet add package Azure.Identity
using Microsoft.Graph;
using Azure.Identity;



// Application permissions - daemon/service app
var tenantId = "YOUR_TENANT_ID";
var clientId = "YOUR_CLIENT_ID";
var clientSecret = "YOUR_CLIENT_SECRET";

var credential = new ClientSecretCredential(tenantId, clientId, clientSecret);
var graphClient = new GraphServiceClient(credential);

// Example: GET /users/{user-id}
var users = await graphClient.Users.GetAsync();
foreach (var user in users?.Value ?? [])
{
    Console.WriteLine($"User: {user.DisplayName}");
}
JavaScript / TypeScript
// npm install @azure/msal-browser @microsoft/microsoft-graph-client
import { PublicClientApplication } from "@azure/msal-browser";
import { Client } from "@microsoft/microsoft-graph-client";
import { AuthCodeMSALBrowserAuthenticationProvider } from 
    "@microsoft/microsoft-graph-client/authProviders/authCodeMsalBrowser";

const msalConfig = {
    auth: {
        clientId: "YOUR_CLIENT_ID",
        authority: "https://login.microsoftonline.com/YOUR_TENANT_ID"
    }
};

const pca = new PublicClientApplication(msalConfig);
await pca.initialize();



// Application: Use client credentials (Node.js backend only)
// npm install @azure/identity @microsoft/microsoft-graph-client
import { ClientSecretCredential } from "@azure/identity";
import { TokenCredentialAuthenticationProvider } from 
    "@microsoft/microsoft-graph-client/authProviders/azureTokenCredentials";

const credential = new ClientSecretCredential(
    "YOUR_TENANT_ID",
    "YOUR_CLIENT_ID", 
    "YOUR_CLIENT_SECRET"
);

const authProvider = new TokenCredentialAuthenticationProvider(credential, {
    scopes: ["https://graph.microsoft.com/.default"]
});

const graphClient = Client.initWithMiddleware({ authProvider });
const result = await graphClient.api("/users").get();
console.log(result);
PowerShell
# Install Microsoft Graph PowerShell module
Install-Module Microsoft.Graph -Scope CurrentUser



# Application access with certificate
$params = @{
    ClientId = "YOUR_CLIENT_ID"
    TenantId = "YOUR_TENANT_ID"
    CertificateThumbprint = "YOUR_CERT_THUMBPRINT"
}
Connect-MgGraph @params

# Or with client secret (not recommended for production)
# Connect-MgGraph -ClientSecretCredential $credential

# Example: GET /users
$result = Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/users"
$result | ConvertTo-Json -Depth 5

# Always disconnect when done
Disconnect-MgGraph
Python
# pip install msgraph-sdk azure-identity
from azure.identity import InteractiveBrowserCredential, ClientSecretCredential
from msgraph import GraphServiceClient
import asyncio



# Application permissions - client credentials
credential = ClientSecretCredential(
    tenant_id="YOUR_TENANT_ID",
    client_id="YOUR_CLIENT_ID",
    client_secret="YOUR_CLIENT_SECRET"
)
scopes = ["https://graph.microsoft.com/.default"]
client = GraphServiceClient(credential, scopes)

async def get_users():
    # Example: GET /users
    result = await client.users.get()
    for user in result.value:
        print(f"User: {user.display_name}")
    return result

asyncio.run(get_users())

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions and search for ChatMember.ReadWrite.All

4

Grant Admin Consent

Application permissions always require admin consent. Click "Grant admin consent" in the Azure portal.