ESC
Type to search...

NetworkAccess.Read.All

Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated Read All Resources

Allows the app to read all network access information and configuration settings without a signed-in user.

Delegated Access App-Only Access

Permission Details

Application Permission

Read all network access information

Allows the app to read all network access information and configuration settings without a signed-in user.

Delegated Permission Admin consent required

Read all network access information

Allows the app to read all network access information on behalf of the signed-in user.

Properties

Property Type Description
id string The unique identifier for an entity. Read-only.
conditionalAccess microsoft.graph.networkaccess.conditionalAccessSettings
customBlockPage microsoft.graph.networkaccess.customBlockPage
crossTenantAccess microsoft.graph.networkaccess.crossTenantAccessSettings
forwardingOptions microsoft.graph.networkaccess.forwardingOptions

Graph Methods

Delegated access App-only access

No API methods available for this version.

Methods
GET /networkAccess
GET /networkAccess/alerts
GET /networkAccess/alerts/{alert-id}
GET /networkAccess/alerts/{alert-id}/policy
GET /networkAccess/connectivity
GET /networkAccess/connectivity/branches
GET /networkAccess/connectivity/branches/{branchSite-id}
GET /networkAccess/connectivity/branches/{branchSite-id}/connectivityConfiguration
GET /networkAccess/connectivity/branches/{branchSite-id}/connectivityConfiguration/links
GET /networkAccess/connectivity/branches/{branchSite-id}/connectivityConfiguration/links/{connectivityConfigurationLink-id}
GET /networkAccess/connectivity/branches/{branchSite-id}/deviceLinks
GET /networkAccess/connectivity/branches/{branchSite-id}/deviceLinks/{deviceLink-id}
GET /networkAccess/connectivity/branches/{branchSite-id}/forwardingProfiles
GET /networkAccess/connectivity/branches/{branchSite-id}/forwardingProfiles/{forwardingProfile-id}
GET /networkAccess/connectivity/branches/{branchSite-id}/forwardingProfiles/{forwardingProfile-id}/policies
GET /networkAccess/connectivity/branches/{branchSite-id}/forwardingProfiles/{forwardingProfile-id}/policies/{policyLink-id}
GET /networkAccess/connectivity/branches/{branchSite-id}/forwardingProfiles/{forwardingProfile-id}/policies/{policyLink-id}/policy
GET /networkAccess/connectivity/branches/{branchSite-id}/forwardingProfiles/{forwardingProfile-id}/servicePrincipal
GET /networkAccess/connectivity/branches/{branchSiteId}
GET /networkAccess/connectivity/branches/{branchSiteId}/connectivityConfiguration
GET /networkAccess/connectivity/branches/{branchSiteId}/deviceLinks
GET /networkAccess/connectivity/branches/{branchSiteId}/deviceLinks/{deviceLinkId}
GET /networkAccess/connectivity/getWebCategoryByUrl(url='@url')?@url=url
GET /networkAccess/connectivity/remoteNetworks
GET /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}
GET /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/connectivityConfiguration
GET /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/connectivityConfiguration/links
GET /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/connectivityConfiguration/links/{connectivityConfigurationLink-id}
GET /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/deviceLinks
GET /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/deviceLinks/{deviceLink-id}
GET /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/forwardingProfiles
GET /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/forwardingProfiles/{forwardingProfile-id}
GET /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/forwardingProfiles/{forwardingProfile-id}/policies
GET /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/forwardingProfiles/{forwardingProfile-id}/policies/{policyLink-id}
GET /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/forwardingProfiles/{forwardingProfile-id}/policies/{policyLink-id}/policy
GET /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/forwardingProfiles/{forwardingProfile-id}/servicePrincipal
GET /networkAccess/connectivity/remoteNetworks/{remoteNetworkId}/deviceLinks/{deviceLinkId}
GET /networkAccess/deployments
GET /networkAccess/filteringPolicies
GET /networkaccess/filteringPolicies/{filteringPoliciesId}/policyRules/{policyRulesId}
GET /networkAccess/filteringPolicies/{filteringPolicy-id}
GET /networkAccess/filteringPolicies/{filteringPolicy-id}/policyRules
GET /networkAccess/filteringPolicies/{filteringPolicy-id}/policyRules/{policyRule-id}
GET /networkAccess/filteringProfiles
GET /networkAccess/filteringProfiles/{filteringProfile-id}
GET /networkAccess/filteringProfiles/{filteringProfile-id}/conditionalAccessPolicies
GET /networkAccess/filteringProfiles/{filteringProfile-id}/conditionalAccessPolicies/{conditionalAccessPolicy-id}
GET /networkAccess/filteringProfiles/{filteringProfile-id}/policies
GET /networkAccess/filteringProfiles/{filteringProfile-id}/policies/{policyLink-id}
GET /networkAccess/filteringProfiles/{filteringProfile-id}/policies/{policyLink-id}/policy
GET /networkAccess/filteringProfiles/{filteringProfileId}
GET /networkAccess/filteringProfiles/{filteringProfileId}/policies
GET /networkAccess/filteringProfiles/{filteringProfileId}/policies?$filter=isof('microsoft.graph.networkaccess.tlsInspectionPolicyLink')
GET /networkAccess/forwardingPolicies
GET /networkAccess/forwardingPolicies/{forwardingPolicy-id}
GET /networkAccess/forwardingPolicies/{forwardingPolicy-id}/policyRules
GET /networkAccess/forwardingPolicies/{forwardingPolicy-id}/policyRules/{policyRule-id}
GET /networkAccess/forwardingPolicies/{forwardingPolicyId}
GET /networkaccess/forwardingPolicies/{forwardingPolicyId}/policyRules/
GET /networkaccess/forwardingPolicies/{forwardingPolicyId}/policyRules/{ruleId}
GET /networkAccess/forwardingProfiles
GET /networkAccess/forwardingProfiles/
GET /networkAccess/forwardingProfiles/{forwardingProfile-id}
GET /networkAccess/forwardingProfiles/{forwardingProfile-id}/policies
GET /networkAccess/forwardingProfiles/{forwardingProfile-id}/policies/{policyLink-id}
GET /networkAccess/forwardingProfiles/{forwardingProfile-id}/policies/{policyLink-id}/policy
GET /networkAccess/forwardingProfiles/{forwardingProfile-id}/servicePrincipal
GET /networkAccess/forwardingProfiles/{forwardingProfileId}
GET /networkAccess/forwardingProfiles/{forwardingProfileId}/policies/{forwardingPolicyId}
GET /networkAccess/logs
GET /networkAccess/logs/connections
GET /networkAccess/logs/connections/{connection-id}
GET /networkAccess/logs/remoteNetworks
GET /networkAccess/logs/remoteNetworks/{remoteNetworkHealthEvent-id}
GET /networkAccess/logs/traffic
GET /networkAccess/reports
GET /networkAccess/reports/getApplicationUsageAnalytics(startDateTime={startDateTime},endDateTime={endDateTime},aggregatedBy={aggregatedBy})
GET /networkAccess/reports/getConnectionSummaries(startDateTime='{startDateTime}',endDateTime='{endDateTime}')
GET /networkAccess/reports/getDiscoveredApplicationSegmentReport(startDateTime={startDateTime},endDateTime={endDateTime})
GET /networkAccess/reports/getEnterpriseApplicationReport(startDateTime={startDateTime},endDateTime={endDateTime})
GET /networkAccess/reports/usageProfiling(startDateTime={startDateTime},endDateTime={endDateTime},aggregatedBy={aggregatedBy})
GET /networkAccess/settings
GET /networkAccess/settings/conditionalAccess
GET /networkAccess/settings/crossTenantAccess
GET /networkAccess/settings/customBlockPage
GET /networkAccess/settings/forwardingOptions
GET /networkAccess/tenantStatus
GET /networkAccess/threatIntelligencePolicies
GET /networkAccess/threatIntelligencePolicies/{threatIntelligencePolicyId}
GET /networkAccess/tls
GET /networkAccess/tls/externalCertificateAuthorityCertificates
GET /networkAccess/tls/externalCertificateAuthorityCertificates/{externalCertificateAuthorityCertificate-id}
GET /networkAccess/tls/externalCertificateAuthorityCertificates/{externalCertificateAuthorityCertificateId}
GET /networkAccess/tlsInspectionPolicies
GET /networkAccess/tlsInspectionPolicies/{tlsInspectionPolicyId}
GET /networkAccess/tlsInspectionPolicies/{tlsInspectionPolicyId}/policyRules
GET /networkAccess/tlsInspectionPolicies/{tlsInspectionPolicyId}/policyRules/{tlsInspectionRuleId}
GET /networkAccessRoot/alerts/getAlertFrequencies(startDateTime={startDateTime},endDateTime={endDateTime})
GET /networkAccessRoot/alerts/getAlertSummaries(startDateTime={startDateTime},endDateTime={endDateTime})
POST /networkAccess/alerts
POST /networkAccess/connectivity/branches
POST /networkAccess/connectivity/branches/{branchSite-id}/connectivityConfiguration/links
POST /networkAccess/connectivity/branches/{branchSite-id}/deviceLinks
POST /networkAccess/connectivity/branches/{branchSite-id}/forwardingProfiles
POST /networkAccess/connectivity/branches/{branchSite-id}/forwardingProfiles/{forwardingProfile-id}/policies
POST /networkAccess/connectivity/remoteNetworks
POST /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/connectivityConfiguration/links
POST /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/deviceLinks
POST /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/forwardingProfiles
POST /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/forwardingProfiles/{forwardingProfile-id}/policies
POST /networkAccess/filteringPolicies
POST /networkAccess/filteringPolicies/{filteringPolicy-id}/policyRules
POST /networkAccess/filteringProfiles
POST /networkAccess/filteringProfiles/{filteringProfile-id}/policies
POST /networkAccess/forwardingPolicies
POST /networkAccess/forwardingPolicies/{forwardingPolicy-id}/microsoft.graph.networkaccess.updatePolicyRules
POST /networkAccess/forwardingPolicies/{forwardingPolicy-id}/policyRules
POST /networkAccess/forwardingProfiles
POST /networkAccess/forwardingProfiles/{forwardingProfile-id}/policies
POST /networkAccess/logs/connections
POST /networkAccess/logs/remoteNetworks
POST /networkAccess/logs/traffic
POST /networkAccess/microsoft.graph.networkaccess.onboard
POST /networkAccess/tls/externalCertificateAuthorityCertificates
PATCH /networkAccess
PATCH /networkAccess/alerts/{alert-id}
PATCH /networkAccess/connectivity
PATCH /networkAccess/connectivity/branches/{branchSite-id}
PATCH /networkAccess/connectivity/branches/{branchSite-id}/connectivityConfiguration
PATCH /networkAccess/connectivity/branches/{branchSite-id}/connectivityConfiguration/links/{connectivityConfigurationLink-id}
PATCH /networkAccess/connectivity/branches/{branchSite-id}/deviceLinks/{deviceLink-id}
PATCH /networkAccess/connectivity/branches/{branchSite-id}/forwardingProfiles/{forwardingProfile-id}
PATCH /networkAccess/connectivity/branches/{branchSite-id}/forwardingProfiles/{forwardingProfile-id}/policies/{policyLink-id}
PATCH /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}
PATCH /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/connectivityConfiguration
PATCH /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/connectivityConfiguration/links/{connectivityConfigurationLink-id}
PATCH /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/deviceLinks/{deviceLink-id}
PATCH /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/forwardingProfiles/{forwardingProfile-id}
PATCH /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/forwardingProfiles/{forwardingProfile-id}/policies/{policyLink-id}
PATCH /networkAccess/filteringPolicies/{filteringPolicy-id}
PATCH /networkAccess/filteringPolicies/{filteringPolicy-id}/policyRules/{policyRule-id}
PATCH /networkAccess/filteringProfiles/{filteringProfile-id}
PATCH /networkAccess/filteringProfiles/{filteringProfile-id}/policies/{policyLink-id}
PATCH /networkAccess/forwardingPolicies/{forwardingPolicy-id}
PATCH /networkAccess/forwardingPolicies/{forwardingPolicy-id}/policyRules/{policyRule-id}
PATCH /networkAccess/forwardingProfiles/{forwardingProfile-id}
PATCH /networkAccess/forwardingProfiles/{forwardingProfile-id}/policies/{policyLink-id}
PATCH /networkAccess/logs
PATCH /networkAccess/logs/connections/{connection-id}
PATCH /networkAccess/logs/remoteNetworks/{remoteNetworkHealthEvent-id}
PATCH /networkAccess/logs/traffic
PATCH /networkAccess/reports
PATCH /networkAccess/settings
PATCH /networkAccess/settings/conditionalAccess
PATCH /networkAccess/settings/crossTenantAccess
PATCH /networkAccess/settings/customBlockPage
PATCH /networkAccess/settings/forwardingOptions
PATCH /networkAccess/tenantStatus
PATCH /networkAccess/tls
PATCH /networkAccess/tls/externalCertificateAuthorityCertificates/{externalCertificateAuthorityCertificate-id}
DELETE /networkAccess/alerts/{alert-id}
DELETE /networkAccess/connectivity
DELETE /networkAccess/connectivity/branches/{branchSite-id}
DELETE /networkAccess/connectivity/branches/{branchSite-id}/connectivityConfiguration
DELETE /networkAccess/connectivity/branches/{branchSite-id}/connectivityConfiguration/links/{connectivityConfigurationLink-id}
DELETE /networkAccess/connectivity/branches/{branchSite-id}/deviceLinks/{deviceLink-id}
DELETE /networkAccess/connectivity/branches/{branchSite-id}/forwardingProfiles/{forwardingProfile-id}
DELETE /networkAccess/connectivity/branches/{branchSite-id}/forwardingProfiles/{forwardingProfile-id}/policies/{policyLink-id}
DELETE /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}
DELETE /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/connectivityConfiguration
DELETE /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/connectivityConfiguration/links/{connectivityConfigurationLink-id}
DELETE /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/deviceLinks/{deviceLink-id}
DELETE /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/forwardingProfiles/{forwardingProfile-id}
DELETE /networkAccess/connectivity/remoteNetworks/{remoteNetwork-id}/forwardingProfiles/{forwardingProfile-id}/policies/{policyLink-id}
DELETE /networkAccess/filteringPolicies/{filteringPolicy-id}
DELETE /networkAccess/filteringPolicies/{filteringPolicy-id}/policyRules/{policyRule-id}
DELETE /networkAccess/filteringProfiles/{filteringProfile-id}
DELETE /networkAccess/filteringProfiles/{filteringProfile-id}/policies/{policyLink-id}
DELETE /networkAccess/forwardingPolicies/{forwardingPolicy-id}
DELETE /networkAccess/forwardingPolicies/{forwardingPolicy-id}/policyRules/{policyRule-id}
DELETE /networkAccess/forwardingProfiles/{forwardingProfile-id}
DELETE /networkAccess/forwardingProfiles/{forwardingProfile-id}/policies/{policyLink-id}
DELETE /networkAccess/logs
DELETE /networkAccess/logs/connections/{connection-id}
DELETE /networkAccess/logs/remoteNetworks/{remoteNetworkHealthEvent-id}
DELETE /networkAccess/logs/traffic
DELETE /networkAccess/reports
DELETE /networkAccess/settings
DELETE /networkAccess/settings/conditionalAccess
DELETE /networkAccess/settings/crossTenantAccess
DELETE /networkAccess/settings/customBlockPage
DELETE /networkAccess/settings/forwardingOptions
DELETE /networkAccess/tenantStatus
DELETE /networkAccess/tls
DELETE /networkAccess/tls/externalCertificateAuthorityCertificates/{externalCertificateAuthorityCertificate-id}

No PowerShell cmdlets available for this version.

Code Examples

C# / .NET SDK
// Install: dotnet add package Microsoft.Graph
// Install: dotnet add package Azure.Identity
using Microsoft.Graph;
using Azure.Identity;

// Delegated permissions - interactive user sign-in
var scopes = new[] { "NetworkAccess.Read.All" };
var options = new InteractiveBrowserCredentialOptions
{
    ClientId = "YOUR_CLIENT_ID",
    TenantId = "YOUR_TENANT_ID",
    RedirectUri = new Uri("http://localhost")
};
var credential = new InteractiveBrowserCredential(options);
var graphClient = new GraphServiceClient(credential, scopes);

// Example: GET /me
var result = await graphClient.Me.GetAsync();
Console.WriteLine($"User: {result?.DisplayName}");

// Application permissions - daemon/service app
var tenantId = "YOUR_TENANT_ID";
var clientId = "YOUR_CLIENT_ID";
var clientSecret = "YOUR_CLIENT_SECRET";

var credential = new ClientSecretCredential(tenantId, clientId, clientSecret);
var graphClient = new GraphServiceClient(credential);

// Example: GET /users/{user-id}
var users = await graphClient.Users.GetAsync();
foreach (var user in users?.Value ?? [])
{
    Console.WriteLine($"User: {user.DisplayName}");
}
JavaScript / TypeScript
// npm install @azure/msal-browser @microsoft/microsoft-graph-client
import { PublicClientApplication } from "@azure/msal-browser";
import { Client } from "@microsoft/microsoft-graph-client";
import { AuthCodeMSALBrowserAuthenticationProvider } from 
    "@microsoft/microsoft-graph-client/authProviders/authCodeMsalBrowser";

const msalConfig = {
    auth: {
        clientId: "YOUR_CLIENT_ID",
        authority: "https://login.microsoftonline.com/YOUR_TENANT_ID"
    }
};

const pca = new PublicClientApplication(msalConfig);
await pca.initialize();

// Delegated: Login with required scope
const loginResponse = await pca.loginPopup({
    scopes: ["NetworkAccess.Read.All"]
});

const authProvider = new AuthCodeMSALBrowserAuthenticationProvider(pca, {
    account: loginResponse.account,
    scopes: ["NetworkAccess.Read.All"],
    interactionType: "popup"
});

const graphClient = Client.initWithMiddleware({ authProvider });

// Example: GET /me
const result = await graphClient.api("/me").get();
console.log(result);

// Application: Use client credentials (Node.js backend only)
// npm install @azure/identity @microsoft/microsoft-graph-client
import { ClientSecretCredential } from "@azure/identity";
import { TokenCredentialAuthenticationProvider } from 
    "@microsoft/microsoft-graph-client/authProviders/azureTokenCredentials";

const credential = new ClientSecretCredential(
    "YOUR_TENANT_ID",
    "YOUR_CLIENT_ID", 
    "YOUR_CLIENT_SECRET"
);

const authProvider = new TokenCredentialAuthenticationProvider(credential, {
    scopes: ["https://graph.microsoft.com/.default"]
});

const graphClient = Client.initWithMiddleware({ authProvider });
const result = await graphClient.api("/users").get();
console.log(result);
PowerShell
# Install Microsoft Graph PowerShell module
Install-Module Microsoft.Graph -Scope CurrentUser

# Delegated access - interactive sign-in
Connect-MgGraph -Scopes "NetworkAccess.Read.All"

# Verify connection
Get-MgContext | Select-Object Account, TenantId, Scopes

# Example: GET /me
$result = Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/me"
$result | ConvertTo-Json -Depth 5

# Application access with certificate
$params = @{
    ClientId = "YOUR_CLIENT_ID"
    TenantId = "YOUR_TENANT_ID"
    CertificateThumbprint = "YOUR_CERT_THUMBPRINT"
}
Connect-MgGraph @params

# Or with client secret (not recommended for production)
# Connect-MgGraph -ClientSecretCredential $credential

# Example: GET /users
$result = Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/users"
$result | ConvertTo-Json -Depth 5

# Always disconnect when done
Disconnect-MgGraph
Python
# pip install msgraph-sdk azure-identity
from azure.identity import InteractiveBrowserCredential, ClientSecretCredential
from msgraph import GraphServiceClient
import asyncio

# Delegated permissions - interactive browser sign-in
credential = InteractiveBrowserCredential(
    client_id="YOUR_CLIENT_ID",
    tenant_id="YOUR_TENANT_ID"
)
scopes = ["NetworkAccess.Read.All"]
client = GraphServiceClient(credential, scopes)

async def get_data():
    # Example: GET /me
    result = await client.me.get()
    print(f"User: {result.display_name}")
    return result

asyncio.run(get_data())

# Application permissions - client credentials
credential = ClientSecretCredential(
    tenant_id="YOUR_TENANT_ID",
    client_id="YOUR_CLIENT_ID",
    client_secret="YOUR_CLIENT_SECRET"
)
scopes = ["https://graph.microsoft.com/.default"]
client = GraphServiceClient(credential, scopes)

async def get_users():
    # Example: GET /users
    result = await client.users.get()
    for user in result.value:
        print(f"User: {user.display_name}")
    return result

asyncio.run(get_users())

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or Delegated permissions and search for NetworkAccess.Read.All

4

Grant Admin Consent

Application permissions always require admin consent. Click "Grant admin consent" in the Azure portal.