ExternalUserProfile.ReadWrite.All
Allows the app to read and write available properties of external user profiles, without a signed-in user.
Permission Details
Read and write all external user profiles
Allows the app to read and write available properties of external user profiles, without a signed-in user.
761327c9-d819-4c08-9a5f-874cd2826608
Read and write external user profiles
Allows the app to read and write available properties of external user profiles, on behalf of the signed-in user.
c6068dc7-a791-46a4-a811-b8228e6649ab
Properties
Properties is shown from beta metadata because a stable v1.0 schema is not available for this resource mapping.
| Property | Type | Description |
|---|---|---|
address |
physicalOfficeAddress |
The office address of the external user profile. Inherited from externalProfile. |
createdBy |
StringNullable |
The object ID of the user who created the external user profile. Inherited from externalProfile. Read-only. Not nullable. |
createdDateTime |
DateTimeOffsetNullable |
Date and time when this external user was created. Inherited from externalProfile. Not nullable. Read-only. |
companyName |
StringNullable |
The company name of the external user profile. Inherited from externalProfile. Supports $filter (eq, startswith). |
deletedDateTime |
DateTimeOffsetNullable |
Date and time when this external user profile was deleted. Always null when the object isn't deleted. Inherited from externalProfile. |
department |
StringNullable |
The department of the external user profile. Inherited from externalProfile. |
displayName |
String |
The display name of the external user profile. Inherited from externalProfile. |
id |
String |
The unique identifier for the external user profile. For example, 12345678-9abc-def0-1234-56789abcde. The value of the id property is often but not exclusively in the form of a GUID; treat it as an opaque identifier and don't rely on it being a GUID. Key. Not nullable. Read-only. |
isDiscoverable |
BooleanNullable |
Represents whether the external user profile is discoverable in the directory. When true, this external profile shows up in Teams search. When false, this external profile doesn't show up in Teams search. Inherited from externalProfile. |
isEnabled |
BooleanNullable |
Represents whether the external user profile is enabled in the directory. This property is peer to the accountEnabled property on the User object. |
jobTitle |
StringNullable |
The job title of the external user profile. Inherited from externalProfile. |
phoneNumber |
StringNullable |
The phone number of the external user profile. Must be in E164 format. Inherited from externalProfile. |
supervisorId |
StringNullable |
The object ID of the supervisor of the external user profile. Inherited from externalProfile. Supports $filter (eq, startswith). |
JSON Representation
JSON representation is shown from beta metadata because a stable v1.0 schema is not available for this resource mapping.
{
"@odata.type": "#microsoft.graph.externalUserProfile",
"id": "String (identifier)",
"deletedDateTime": "String (timestamp)",
"createdDateTime": "String (timestamp)",
"createdBy": "String",
"companyName": "String",
"displayName": "String",
"jobTitle": "String",
"isDiscoverable": "Boolean",
"isEnabled": "Boolean",
"department": "String",
"phoneNumber": "String",
"address": {
"@odata.type": "microsoft.graph.physicalOfficeAddress"
},
"supervisorId": "String"
}
Relationships
Relationships metadata is not available for this permission mapping.
View resource documentationGraph Methods
Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.
No API methods available for this version.
Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.
| Methods |
|---|
GET
/directory/externalUserProfiles/{id}
|
PATCH
/directory/externalUserProfiles/{id}
|
DELETE
/directory/externalUserProfiles/{id}
|
Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.
No deterministic PowerShell command map is available for this permission.
Browse PowerShell docsMicrosoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.
Code Examples
// Code snippets are only available for the latest version. Current version is 5.x
// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
await graphClient.Directory.ExternalUserProfiles["{externalUserProfile-id}"].DeleteAsync();
const options = {
authProvider,
};
const client = Client.init(options);
await client.api('/directory/externalUserProfiles/{id}')
.version('beta')
.delete();
Import-Module Microsoft.Graph.Beta.Identity.DirectoryManagement
Remove-MgBetaDirectoryExternalUserProfile -ExternalUserProfileId $externalUserProfileId
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
await graph_client.directory.external_user_profiles.by_external_user_profile_id('externalUserProfile-id').delete()
App Registration
Navigate to Azure Portal
Go to App registrations in Microsoft Entra admin center
Add API Permission
Select your app → API permissions → Add a permission → Microsoft Graph
Select Permission Type
Choose Application permissions or delegated permissions and search for ExternalUserProfile.ReadWrite.All
Grant Admin Consent
Application permissions always require admin consent.