NetworkAccessPolicy.ReadWrite.All
Allows the app to read and write your organization's network access policies, without a signed-in user.
Permission Details
Read and write all security and routing policies for network access
Allows the app to read and write your organization's network access policies, without a signed-in user.
f0c341be-8348-4989-8e43-660324294538
Read and write security and routing policies for network access
Allows the app to read and write your organization's security and routing network access policies on behalf of the signed-in user.
b1fbad0f-ef6e-42ed-8676-bca7fa3e7291
Properties
Properties is shown from beta metadata because a stable v1.0 schema is not available for this resource mapping.
| Property | Type | Description |
|---|---|---|
description |
StringNullable |
Description. |
id |
String |
Identifier. Inherited from microsoft.graph.entity. |
name |
String |
Policy name. |
version |
String |
Version. |
policyRules |
networkaccess.policyRule collection |
Represents the definition of the policy ruleset that makes up the core definition of a policy. |
JSON Representation
JSON representation is shown from beta metadata because a stable v1.0 schema is not available for this resource mapping.
{
"@odata.type": "#microsoft.graph.networkaccess.policy",
"id": "String (identifier)",
"name": "String",
"description": "String",
"version": "String"
}
Relationships
Relationships is shown from beta metadata because a stable v1.0 schema is not available for this resource mapping.
| Relationship | Type | Description |
|---|---|---|
policyRules |
networkaccess.policyRule collection |
Represents the definition of the policy ruleset that makes up the core definition of a policy. |
Graph Methods
Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.
No API methods available for this version.
Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.
Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.
No deterministic PowerShell command map is available for this permission.
Browse PowerShell docsMicrosoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.
Code Examples
// Code snippets are only available for the latest version. Current version is 5.x
// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
await graphClient.NetworkAccess.FilteringPolicies["{filteringPolicy-id}"].DeleteAsync();
const options = {
authProvider,
};
const client = Client.init(options);
const branchSite = {
name: 'branch 1',
region: 'eastUS',
deviceLinks:
[
{
name: 'device link 1',
ipAddress: '24.123.22.168',
deviceVendor: 'intel',
bandwidthCapacityInMbps: 'mbps250',
bgpConfiguration:
{
localIpAddress: '1.128.24.22',
peerIpAddress: '1.128.24.28',
asn: 4,
},
redundancyConfiguration:
{
zoneLocalIpAddress: '1.128.23.20',
redundancyTier: 'zoneRedundancy',
},
tunnelConfiguration:
{
'@odata.type': 'microsoft.graph.networkAccess.tunnelConfigurationIKEv2Default',
preSharedKey: '/path/to/kv'
}
}
],
forwardingProfiles: [
{
id: '8e30d8d6-3588-4d5f-a704-6bd843be5b8f'
}
]
};
await client.api('/networkAccess/connectivity/branches/{branchSiteId}/')
.version('beta')
.post(branchSite);
Import-Module Microsoft.Graph.Beta.NetworkAccess
Remove-MgBetaNetworkAccessFilteringPolicy -FilteringPolicyId $filteringPolicyId
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
await graph_client.network_access.filtering_policies.by_filtering_policy_id('filteringPolicy-id').delete()
App Registration
Navigate to Azure Portal
Go to App registrations in Microsoft Entra admin center
Add API Permission
Select your app → API permissions → Add a permission → Microsoft Graph
Select Permission Type
Choose Application permissions or delegated permissions and search for NetworkAccessPolicy.ReadWrite.All
Grant Admin Consent
Application permissions always require admin consent.