ESC
Type to search...

NetworkAccessPolicy.ReadWrite.All

Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated Read/Write All Resources

Allows the app to read and write your organization's network access policies, without a signed-in user.

Permission data: April 6, 2026 at 4:06 AM UTC
Delegated Access App-Only Access

Permission Details

Application Permission

Read and write all security and routing policies for network access

Allows the app to read and write your organization's network access policies, without a signed-in user.

Delegated Permission Admin consent required

Read and write security and routing policies for network access

Allows the app to read and write your organization's security and routing network access policies on behalf of the signed-in user.

Properties

Microsoft Graph beta exact-category-docs

Properties is shown from beta metadata because a stable v1.0 schema is not available for this resource mapping.

Property Type Description
description StringNullable Description.
id String Identifier. Inherited from microsoft.graph.entity.
name String Policy name.
version String Version.
policyRules networkaccess.policyRule collection Represents the definition of the policy ruleset that makes up the core definition of a policy.

JSON Representation

Microsoft Graph beta exact-category-docs

JSON representation is shown from beta metadata because a stable v1.0 schema is not available for this resource mapping.

JSON representation
{
  "@odata.type": "#microsoft.graph.networkaccess.policy",
  "id": "String (identifier)",
  "name": "String",
  "description": "String",
  "version": "String"
}

Relationships

Microsoft Graph beta exact-category-docs

Relationships is shown from beta metadata because a stable v1.0 schema is not available for this resource mapping.

Relationship Type Description
policyRules networkaccess.policyRule collection Represents the definition of the policy ruleset that makes up the core definition of a policy.

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

No API methods available for this version.

Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /filteringProfiles/{filteringProfileId}/policies
GET /networkAccess/connectivity/branches/{branchSiteId}/forwardingProfiles
GET /networkaccess/filteringPolicies/{filteringPoliciesId}
GET /networkAccess/filteringPolicies/{filteringPolicyId}
GET /networkaccess/filteringPolicies/{filteringPolicyId}?$expand=policyRules
GET /networkAccess/filteringProfiles/{filteringProfileId}/policies/{policyLinkId}/policy
GET /networkAccess/forwardingProfiles/{forwardingProfileId}/policies/
GET /networkAccess/reports/entitiesSummaries(startDateTime={startDateTime},endDateTime={endDateTime})
GET /networkAccess/reports/getCloudApplicationReport(startDateTime={startDateTime},endDateTime={endDateTime})
GET /networkAccess/reports/getCrossTenantSummary(startDateTime={startDateTime},endDateTime={endDateTime},discoveryPivotDateTime={discoveryPivotDateTime})
GET /networkAccess/reports/getDestinationSummaries(startDateTime={startDateTime},endDateTime={endDateTime},aggregatedBy={aggregatedBy})
GET /networkAccess/reports/getDeviceUsageSummary(startDateTime={startDateTime},endDateTime={endDateTime},activityPivotDateTime={activityPivotDateTime})
GET /networkAccess/reports/transactionSummaries(startDateTime={startDateTime},endDateTime={endDateTime})
GET /networkAccess/settings/forwardingOptions
GET /networkAccess/tenantStatus
GET /networkAccessRoot/reports/crossTenantAccessReport(startDateTime={startDateTime}, endDateTime={endDateTime})
GET /networkAccessRoot/reports/destinationReport(startDateTime={startDateTime}, endDateTime={endDateTime})
GET /networkAccessRoot/reports/deviceReport(startDateTime={startDateTime}, endDateTime={endDateTime})
GET /networkAccessRoot/reports/userReport(startDateTime={startDateTime},endDateTime={endDateTime})
GET /networkAccessRoot/reports/webCategoryReport(startDateTime={startDateTime},endDateTime={endDateTime})
POST /networkAccess/connectivity/branches/{branchSiteId}/forwardingProfiles
POST /networkAccess/forwardingPolicies/{id}/updatePolicyRules
PATCH /networkAccess/filteringProfiles({filteringProfileid})/policies({Policylinkid})
PATCH /networkAccess/settings/forwardingOptions
DELETE /networkaccess/filteringPolicies/{filteringPoliciesId}
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

No deterministic PowerShell command map is available for this permission.

Browse PowerShell docs
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgBetaNetworkAccessConnectivityBranchForwardingProfile /networkAccess/connectivity/branches/{branchSiteId}/forwardingProfiles
List forwardingProfiles (deprecated)
Get-MgBetaNetworkAccessFilteringPolicy /networkaccess/filteringPolicies/{filteringPoliciesId}
Get filteringPolicyLink
Get-MgBetaNetworkAccessFilteringPolicy /networkAccess/filteringPolicies/{filteringPolicyId}
Get filteringPolicy
Get-MgBetaNetworkAccessFilteringPolicy /networkaccess/filteringPolicies/{filteringPolicyId}?$expand=policyRules
List filteringRules
Get-MgBetaNetworkAccessFilteringProfilePolicy /filteringProfiles/{filteringProfileId}/policies
List filteringPolicyLink objects
Get-MgBetaNetworkAccessFilteringProfilePolicy /networkaccess/filteringPolicies/{filteringPoliciesId}
Get filteringPolicyLink
Get-MgBetaNetworkAccessFilteringProfilePolicy /networkAccess/filteringProfiles/{filteringProfileId}/policies/{policyLinkId}/policy
List policy
Get-MgBetaNetworkAccessForwardingProfilePolicy /networkAccess/forwardingProfiles/{forwardingProfileId}/policies/
List forwarding policies
Get-MgBetaNetworkAccessReportCloudApplicationReport /networkAccess/reports/getCloudApplicationReport(startDateTime={startDateTime},endDateTime={endDateTime})
reports: getCloudApplicationReport
Get-MgBetaNetworkAccessSettingForwardingOption /networkAccess/settings/forwardingOptions
Get forwardingOptions
Get-MgBetaNetworkAccessTenantStatus /networkAccess/tenantStatus
Get tenantStatus
Invoke-MgBetaEntityNetworkAccessReportSummary /networkAccess/reports/entitiesSummaries(startDateTime={startDateTime},endDateTime={endDateTime})
reports: entitiesSummaries
Remove-MgBetaNetworkAccessFilteringPolicy /networkaccess/filteringPolicies/{filteringPoliciesId}
Delete filteringPolicyLink
Update-MgBetaNetworkAccessFilteringProfilePolicy /networkAccess/filteringProfiles({filteringProfileid})/policies({Policylinkid})
Update filteringPolicyLink
Update-MgBetaNetworkAccessSettingForwardingOption /networkAccess/settings/forwardingOptions
Update forwardingOptions

Code Examples

C# / .NET SDK
Delete filteringPolicyLink
// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
await graphClient.NetworkAccess.FilteringPolicies["{filteringPolicy-id}"].DeleteAsync();
JavaScript
Assign a forwardingProfile (deprecated)
const options = {
	authProvider,
};

const client = Client.init(options);

const branchSite = {
    name: 'branch 1',
    region: 'eastUS',
    deviceLinks: 
    [
        {
            name: 'device link 1',
            ipAddress: '24.123.22.168',
            deviceVendor: 'intel',
            bandwidthCapacityInMbps: 'mbps250',
            bgpConfiguration: 
            {
                localIpAddress: '1.128.24.22',
                peerIpAddress: '1.128.24.28',
                asn: 4,
            },
            redundancyConfiguration: 
            {
                zoneLocalIpAddress: '1.128.23.20',
                redundancyTier: 'zoneRedundancy',
            },
            tunnelConfiguration: 
            {
                '@odata.type': 'microsoft.graph.networkAccess.tunnelConfigurationIKEv2Default',
                preSharedKey: '/path/to/kv'
            }
        }
    ],
    forwardingProfiles: [
        {
            id: '8e30d8d6-3588-4d5f-a704-6bd843be5b8f'
        }
    ]
};

await client.api('/networkAccess/connectivity/branches/{branchSiteId}/')
	.version('beta')
	.post(branchSite);
PowerShell
Delete filteringPolicyLink
Import-Module Microsoft.Graph.Beta.NetworkAccess

Remove-MgBetaNetworkAccessFilteringPolicy -FilteringPolicyId $filteringPolicyId
Python
Delete filteringPolicyLink
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

await graph_client.network_access.filtering_policies.by_filtering_policy_id('filteringPolicy-id').delete()

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for NetworkAccessPolicy.ReadWrite.All

4

Grant Admin Consent

Application permissions always require admin consent.