ESC
Type to search...

NetworkAccess.Read.All

Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated Read All Resources

Allows the app to read all network access information and configuration settings without a signed-in user.

Permission data: April 6, 2026 at 4:06 AM UTC
Delegated Access App-Only Access

Permission Details

Application Permission

Read all network access information

Allows the app to read all network access information and configuration settings without a signed-in user.

Delegated Permission Admin consent required

Read all network access information

Allows the app to read all network access information on behalf of the signed-in user.

Properties

Microsoft Graph beta endpoint-derived-docs

Properties is shown from beta metadata because a stable v1.0 schema is not available for this resource mapping.

Property Type Description
description String A description of the policy. Inherited from microsoft.graph.networkaccess.policy. Optional.
id String A unique identifier for the policy. Inherited from microsoft.graph.entity. Key. Not nullable. Read-only.
lastModifiedDateTime DateTimeOffset The date and time when the policy was last modified. Read-only.
name String A unique display name for the policy. Inherited from microsoft.graph.networkaccess.policy. Required.
settings networkaccess.cloudFirewallPolicySettings Configuration settings for the cloud firewall policy, including the default action. Required.
version String The version of the policy. Inherited from microsoft.graph.networkaccess.policy. Read-only.
branches networkaccess.branchSite collection The locations for connectivity. DEPRECATED AND TO BE RETIRED SOON. Use the remoteNetwork relationship and its associated APIs instead.
remoteNetworks networkaccess.remoteNetwork collection The locations, such as branches, that are connected to Global Secure Access services through an IPsec tunnel.
webCategories networkaccess.webCategory collection The URL category.

JSON Representation

Microsoft Graph beta endpoint-derived-docs

JSON representation is shown from beta metadata because a stable v1.0 schema is not available for this resource mapping.

JSON representation
{
  "@odata.type": "#microsoft.graph.networkaccess.cloudFirewallPolicy",
  "id": "String (identifier)",
  "name": "String",
  "description": "String",
  "version": "String",
  "lastModifiedDateTime": "String (timestamp)",
  "settings": {
    "@odata.type": "microsoft.graph.networkaccess.cloudFirewallPolicySettings"
  }
}

Relationships

Microsoft Graph beta endpoint-derived-docs

Relationships is shown from beta metadata because a stable v1.0 schema is not available for this resource mapping.

Relationship Type Description
policyRules networkaccess.cloudFirewallRule collection The rules that define specific firewall behaviors within this policy. Inherited from microsoft.graph.networkaccess.policy. Supports $expand.
branches networkaccess.branchSite collection The locations for connectivity. DEPRECATED AND TO BE RETIRED SOON. Use the remoteNetwork relationship and its associated APIs instead.
remoteNetworks networkaccess.remoteNetwork collection The locations, such as branches, that are connected to Global Secure Access services through an IPsec tunnel.
webCategories networkaccess.webCategory collection The URL category.

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

No API methods available for this version.

Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /networkAccess/cloudFirewallPolicies
GET /networkAccess/cloudFirewallPolicies/{cloudFirewallPolicyId}
GET /networkAccess/cloudFirewallPolicies/{cloudFirewallPolicyId}/policyRules
GET /networkAccess/cloudFirewallPolicies/{cloudFirewallPolicyId}/policyRules/{cloudFirewallRuleId}
GET /networkAccess/connectivity/branches
GET /networkAccess/connectivity/branches/{branchSiteId}
GET /networkAccess/connectivity/branches/{branchSiteId}/connectivityConfiguration
GET /networkAccess/connectivity/branches/{branchSiteId}/deviceLinks
GET /networkAccess/connectivity/branches/{branchSiteId}/deviceLinks/{deviceLinkId}
GET /networkAccess/connectivity/getWebCategoryByUrl(url='@url')?@url=url
GET /networkAccess/connectivity/remoteNetworks/{remoteNetworkId}/deviceLinks/{deviceLinkId}
GET /networkAccess/deployments
GET /networkAccess/filteringPolicies
GET /networkaccess/filteringPolicies/{filteringPoliciesId}/policyRules/{policyRulesId}
GET /networkAccess/filteringProfiles
GET /networkAccess/filteringProfiles/{filteringProfileId}
GET /networkAccess/forwardingPolicies
GET /networkAccess/forwardingPolicies/{forwardingPolicyId}
GET /networkaccess/forwardingPolicies/{forwardingPolicyId}/policyRules/
GET /networkaccess/forwardingPolicies/{forwardingPolicyId}/policyRules/{ruleId}
GET /networkAccess/forwardingProfiles/
GET /networkAccess/forwardingProfiles/{forwardingProfileId}
GET /networkAccess/forwardingProfiles/{forwardingProfileId}/policies/{forwardingPolicyId}
GET /networkAccess/reports/getApplicationUsageAnalytics(startDateTime={startDateTime},endDateTime={endDateTime},aggregatedBy={aggregatedBy})
GET /networkAccess/reports/getDiscoveredApplicationSegmentReport(startDateTime={startDateTime},endDateTime={endDateTime})
GET /networkAccess/reports/getEnterpriseApplicationReport(startDateTime={startDateTime},endDateTime={endDateTime})
GET /networkAccess/reports/usageProfiling(startDateTime={startDateTime},endDateTime={endDateTime},aggregatedBy={aggregatedBy})
GET /networkAccess/settings/conditionalAccess
GET /networkAccess/settings/crossTenantAccess
GET /networkAccess/settings/customBlockPage
GET /networkAccess/threatIntelligencePolicies
GET /networkAccess/threatIntelligencePolicies/{threatIntelligencePolicyId}
GET /networkAccess/tls/externalCertificateAuthorityCertificates
GET /networkAccess/tls/externalCertificateAuthorityCertificates/{externalCertificateAuthorityCertificateId}
GET /networkAccess/tlsInspectionPolicies
GET /networkAccess/tlsInspectionPolicies/{tlsInspectionPolicyId}
GET /networkAccess/tlsInspectionPolicies/{tlsInspectionPolicyId}/policyRules
GET /networkAccess/tlsInspectionPolicies/{tlsInspectionPolicyId}/policyRules/{tlsInspectionRuleId}
GET /networkAccessRoot/alerts/getAlertFrequencies(startDateTime={startDateTime},endDateTime={endDateTime})
GET /networkAccessRoot/alerts/getAlertSummaries(startDateTime={startDateTime},endDateTime={endDateTime})
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

No deterministic PowerShell command map is available for this permission.

Browse PowerShell docs
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgBetaNetworkAccessConnectivityBranch /networkAccess/connectivity/branches
List branches (deprecated)
Get-MgBetaNetworkAccessConnectivityBranch /networkAccess/connectivity/branches/{branchSiteId}
Get branchSite (deprecated)
Get-MgBetaNetworkAccessConnectivityBranchConnectivityConfiguration /networkAccess/connectivity/branches/{branchSiteId}/connectivityConfiguration
Get branchConnectivityConfiguration (deprecated)
Get-MgBetaNetworkAccessConnectivityBranchDeviceLink /networkAccess/connectivity/branches/{branchSiteId}/deviceLinks
List deviceLinks (deprecated)
Get-MgBetaNetworkAccessConnectivityRemoteNetworkDeviceLink /networkAccess/connectivity/branches/{branchSiteId}/deviceLinks/{deviceLinkId}
Get deviceLink
Get-MgBetaNetworkAccessConnectivityWebCategoryByUrl /networkAccess/connectivity/getWebCategoryByUrl(url='@url')?@url=url
connectivity: getWebCategoryByUrl
Get-MgBetaNetworkAccessFilteringPolicy /networkAccess/filteringPolicies
List filteringPolicies
Get-MgBetaNetworkAccessFilteringPolicyRule /networkaccess/filteringPolicies/{filteringPoliciesId}/policyRules/{policyRulesId}
Get filteringRule
Get-MgBetaNetworkAccessFilteringProfile /networkAccess/filteringProfiles
List filteringProfiles
Get-MgBetaNetworkAccessFilteringProfilePolicy /networkAccess/filteringProfiles/{filteringProfileId}
Get filteringProfile
Get-MgBetaNetworkAccessForwardingPolicy /networkAccess/forwardingPolicies/{forwardingPolicyId}
Get forwardingPolicy
Get-MgBetaNetworkAccessForwardingPolicyRule /networkaccess/forwardingPolicies/{forwardingPolicyId}/policyRules/
List policyRules
Get-MgBetaNetworkAccessForwardingPolicyRule /networkaccess/forwardingPolicies/{forwardingPolicyId}/policyRules/{ruleId}
Get policyRule
Get-MgBetaNetworkAccessForwardingProfile /networkAccess/forwardingProfiles/
List forwardingProfiles
Get-MgBetaNetworkAccessForwardingProfile /networkAccess/forwardingProfiles/{forwardingProfileId}
Get forwardingProfile
Get-MgBetaNetworkAccessForwardingProfilePolicy /networkAccess/forwardingProfiles/{forwardingProfileId}/policies/{forwardingPolicyId}
Get forwardingPolicyLink
Get-MgBetaNetworkAccessReportApplicationUsageAnalytic /networkAccess/reports/getApplicationUsageAnalytics(startDateTime={startDateTime},endDateTime={endDateTime},aggregatedBy={aggregatedBy})
reports: getApplicationUsageAnalytics
Get-MgBetaNetworkAccessReportDiscoveredApplicationSegmentReport /networkAccess/reports/getDiscoveredApplicationSegmentReport(startDateTime={startDateTime},endDateTime={endDateTime})
reports: getDiscoveredApplicationSegmentReport
Get-MgBetaNetworkAccessReportEnterpriseApplicationReport /networkAccess/reports/getEnterpriseApplicationReport(startDateTime={startDateTime},endDateTime={endDateTime})
reports: getEnterpriseApplicationReport
Get-MgBetaNetworkAccessSettingConditionalAccess /networkAccess/settings/conditionalAccess
Get conditionalAccessSettings
Get-MgBetaNetworkAccessSettingCrossTenantAccess /networkAccess/settings/crossTenantAccess
Get crossTenantAccessSettings
Get-MgBetaNetworkAccessSettingCustomBlockPage /networkAccess/settings/customBlockPage
Get customBlockPage settings
Get-MgBetaNetworkAccessThreatIntelligencePolicy /networkAccess/threatIntelligencePolicies
List threatIntelligencePolicy objects
Get-MgBetaNetworkAccessThreatIntelligencePolicy /networkAccess/threatIntelligencePolicies/{threatIntelligencePolicyId}
Get threatIntelligencePolicy
Get-MgBetaNetworkAccessTlExternalCertificateAuthorityCertificate /networkAccess/tls/externalCertificateAuthorityCertificates
List externalCertificateAuthorityCertificates
Get-MgBetaNetworkAccessTlExternalCertificateAuthorityCertificate /networkAccess/tls/externalCertificateAuthorityCertificates/{externalCertificateAuthorityCertificateId}
Get externalCertificateAuthorityCertificate
Get-MgBetaNetworkAccessTlInspectionPolicy /networkAccess/tlsInspectionPolicies
List tlsInspectionPolicy objects
Get-MgBetaNetworkAccessTlInspectionPolicy /networkAccess/tlsInspectionPolicies/{tlsInspectionPolicyId}
Get tlsInspectionPolicy
Get-MgBetaNetworkAccessTlInspectionPolicyRule /networkAccess/tlsInspectionPolicies/{tlsInspectionPolicyId}/policyRules
List policyRules for TLS Inspection
Get-MgBetaNetworkAccessTlInspectionPolicyRule /networkAccess/tlsInspectionPolicies/{tlsInspectionPolicyId}/policyRules/{tlsInspectionRuleId}
Get tlsInspectionRule
Invoke-MgBetaUsageNetworkAccessReportProfiling /networkAccess/reports/usageProfiling(startDateTime={startDateTime},endDateTime={endDateTime},aggregatedBy={aggregatedBy})
reports: usageProfiling

Code Examples

C# / .NET SDK
connectivity: getWebCategoryByUrl
// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.NetworkAccess.Connectivity.MicrosoftGraphNetworkaccessGetWebCategoryByUrlWithUrl("{url}").GetAsync((requestConfiguration) =>
{
	requestConfiguration.QueryParameters.@url = "msn.com/en-us/sports";
});
JavaScript
connectivity: getWebCategoryByUrl
const options = {
	authProvider,
};

const client = Client.init(options);

let webCategory = await client.api('/networkaccess/connectivity/getWebCategoryByUrl(url='@url')')
	.version('beta')
	.get();
PowerShell
connectivity: getWebCategoryByUrl
Import-Module Microsoft.Graph.Beta.NetworkAccess

Get-MgBetaNetworkAccessConnectivityWebCategoryByUrl -@url "msn.com/en-us/sports"
Python
connectivity: getWebCategoryByUrl
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
from msgraph_beta.generated.network_access.connectivity.microsoft.graph.networkaccess.get_web_category_by_url(url='{url}').get_web_category_by_url_with_url_request_builder import GetWebCategoryByUrlWithUrlRequestBuilder
from kiota_abstractions.base_request_configuration import RequestConfiguration
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
query_params = GetWebCategoryByUrlWithUrlRequestBuilder.GetWebCategoryByUrlWithUrlRequestBuilderGetQueryParameters(
		@url = "msn.com/en-us/sports",
)

request_configuration = RequestConfiguration(
query_parameters = query_params,
)

result = await graph_client.network_access.connectivity.microsoft_graph_networkaccess_get_web_category_by_url_with_url("{url}").get(request_configuration = request_configuration)

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for NetworkAccess.Read.All

4

Grant Admin Consent

Application permissions always require admin consent.