Organization.Read.All | Graph Permissions

Permission Details

Application Permission

Read organization information

Allows the app to read the organization and related resources, without a signed-in user. Related resources include things like subscribed skus and tenant branding information.

Permission ID: 498476ce-e0fe-48b0-b801-37ba7e2685c6

Delegated Permission

Read organization information

Allows the app to read the organization and related resources, on behalf of the signed-in user. Related resources include things like subscribed skus and tenant branding information.

Permission ID: 4908d5b9-3fb2-4b1e-9336-1888b7937185

Properties

Microsoft Graph v1.0 exact-category-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property	Type	Description
`assignedPlans`	`assignedPlan collection`	The collection of service plans associated with the tenant. Not nullable.
`businessPhones`	`String collection`	Telephone number for the organization. Although this property is a string collection, only one number can be set.
`city`	`String`Nullable	City name of the address for the organization.
`country`	`String`Nullable	Country or region name of the address for the organization.
`countryLetterCode`	`String`Nullable	Country or region abbreviation for the organization in ISO 3166-2 format.
`createdDateTime`	`DateTimeOffset`Nullable	Timestamp of when the organization was created. The value can't be modified and is automatically populated when the organization is created. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.
`defaultUsageLocation`	`String`Nullable	Two-letter ISO 3166 country code indicating the default service usage location of an organization.
`deletedDateTime`	`DateTimeOffset`Nullable	Represents date and time of when the Microsoft Entra tenant was deleted using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.
`displayName`	`String`Nullable	The display name for the tenant.
`id`	`String`	The tenant ID, a unique identifier representing the organization (or tenant). Inherited from directoryObject. Key. Not nullable. Read-only.
`isMultipleDataLocationsForServicesEnabled`	`Boolean`	true if organization is Multi-Geo enabled; false if the organization isn't Multi-Geo enabled; null (default). Read-only. For more information, see OneDrive Online Multi-Geo.
`marketingNotificationEmails`	`String collection`	Not nullable.
`onPremisesLastSyncDateTime`	`DateTimeOffset`Nullable	The time and date at which the tenant was last synced with the on-premises directory. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. Read-only.
`onPremisesSyncEnabled`	`Boolean`Nullable	true if this object is synced from an on-premises directory; false if this object was originally synced from an on-premises directory but is no longer synced. Nullable. null if this object isn't synced from on-premises active directory (default).
`partnerTenantType`	`partnerTenantType`	The type of partnership this tenant has with Microsoft. The possible values are: microsoftSupport, syndicatePartner, breadthPartner, breadthPartnerDelegatedAdmin, resellerPartnerDelegatedAdmin, valueAddedResellerPartnerDelegatedAdmin, unknownFutureValue. Nullable. For more information about the possible types, see partnerTenantType values.

Showing 15 of 30 properties.

JSON Representation

Microsoft Graph v1.0 exact-category-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation

{
  "assignedPlans": [
    {
      "@odata.type": "microsoft.graph.assignedPlan"
    }
  ],
  "businessPhones": [
    "string"
  ],
  "city": "string",
  "country": "string",
  "countryLetterCode": "string",
  "createdDateTime": "String (timestamp)",
  "defaultUsageLocation": "String",
  "deletedDateTime": "String (timestamp)",
  "displayName": "string",
  "id": "string (identifier)",
  "isMultipleDataLocationsForServicesEnabled": "boolean",
  "marketingNotificationEmails": [
    "string"
  ],
  "onPremisesLastSyncDateTime": "String (timestamp)",
  "onPremisesSyncEnabled": true,
  "partnerTenantType": "String",
  "postalCode": "string",
  "preferredLanguage": "string",
  "privacyProfile": {
    "@odata.type": "microsoft.graph.privacyProfile"
  },
  "provisionedPlans": [
    {
      "@odata.type": "microsoft.graph.provisionedPlan"
    }
  ],
  "securityComplianceNotificationMails": [
    "string"
  ],
  "securityComplianceNotificationPhones": [
    "string"
  ],
  "state": "string",
  "street": "string",
  "technicalNotificationMails": [
    "string"
  ],
  "tenantType": "string",
  "verifiedDomains": [
    {
      "@odata.type": "microsoft.graph.verifiedDomain"
    }
  ]
}

Relationships

Microsoft Graph v1.0 exact-category-docs

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship	Type	Description
`certificateBasedAuthConfiguration`	`certificateBasedAuthConfiguration collection`	Navigation property to manage certificate-based authentication configuration. Only a single instance of certificateBasedAuthConfiguration can be created in the collection.
`extensions`	`extension collection`	The collection of open extensions defined for the organization. Read-only. Nullable.
`branding`	`organizationalBranding`	Branding for the organization. Nullable.
`assignedPlans`	`assignedPlan collection`	The collection of service plans associated with the tenant. Not nullable.
`businessPhones`	`string collection`	Telephone number for the organization. Although this property is a string collection, only one number can be set.
`marketingNotificationEmails`	`string collection`	Not nullable.
`mobileDeviceManagementAuthority`	`mdmAuthority`	Related mobileDeviceManagementAuthority data exposed by this resource.
`provisionedPlans`	`provisionedPlan collection`	Not nullable.
`securityComplianceNotificationMails`	`string collection`	Not nullable.
`securityComplianceNotificationPhones`	`string collection`	Not nullable.
`technicalNotificationMails`	`string collection`	Not nullable.
`verifiedDomains`	`verifiedDomain collection`	The collection of domains associated with this tenant. Not nullable.

Graph Methods

Delegated access App-only access

Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET `/directory/subscriptions`
GET `/directory/subscriptions(commerceSubscriptionId='{commerceSubscriptionId}')`
GET `/directory/subscriptions/{id}`
GET `/organization`
GET `/organization/{id}/certificateBasedAuthConfiguration`
GET `/organization/{id}/certificateBasedAuthConfiguration/{id}`
GET `/organization/{organizationId}`
GET `/organization/{organizationId}/branding`
GET `/organization/{organizationId}/branding/localizations`
GET `/organization/{organizationId}/branding/localizations/{organizationalBrandingLocalizationId}`
GET `/subscribedSkus`
GET `/subscribedSkus/{id}`

Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET `/directory/subscriptions`
GET `/directory/subscriptions(commerceSubscriptionId='{commerceSubscriptionId}')`
GET `/directory/subscriptions/{id}`
GET `/organization`
GET `/organization/{id}/certificateBasedAuthConfiguration`
GET `/organization/{id}/certificateBasedAuthConfiguration/{id}`
GET `/organization/{organizationId}`
GET `/organization/{organizationId}/branding`
GET `/organization/{organizationId}/branding/localizations`
GET `/organization/{organizationId}/branding/localizations/{organizationalBrandingLocalizationId}`
GET `/organization/{organizationId}/settings/contactInsights`
GET `/organization/{organizationId}/settings/microsoftApplicationDataAccess`
GET `/subscribedSkus`
GET `/subscribedSkus/{id}`

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
`Get-MgDirectorySubscription` /directory/subscriptions List subscriptions
`Get-MgDirectorySubscription` /directory/subscriptions/{id} Get companySubscription
`Get-MgOrganization` /organization List organizations
`Get-MgOrganization` /organization/{organizationId} Get organization
`Get-MgOrganizationBranding` /organization/{organizationId}/branding Get organizationalBranding
`Get-MgOrganizationBrandingLocalization` /organization/{organizationId}/branding/localizations List localizations
`Get-MgOrganizationBrandingLocalization` /organization/{organizationId}/branding/localizations/{organizationalBrandingLocalizationId} Get organizationalBrandingLocalization
`Get-MgOrganizationBrandingLocalizationBannerLogo` /organization/{organizationId}/branding Get organizationalBranding
`Get-MgOrganizationBrandingLocalizationBannerLogo` /organization/{organizationId}/branding/localizations/{organizationalBrandingLocalizationId} Get organizationalBrandingLocalization
`Get-MgOrganizationCertificateBasedAuthConfiguration` /organization/{id}/certificateBasedAuthConfiguration List certificateBasedAuthConfigurations
`Get-MgOrganizationCertificateBasedAuthConfiguration` /organization/{id}/certificateBasedAuthConfiguration/{id} Get certificateBasedAuthConfiguration
`Get-MgSubscribedSku` /subscribedSkus List subscribedSkus
`Get-MgSubscribedSku` /subscribedSkus/{id} Get subscribedSku

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
`Get-MgBetaDirectorySubscription` /directory/subscriptions List subscriptions
`Get-MgBetaDirectorySubscription` /directory/subscriptions/{id} Get companySubscription
`Get-MgBetaOrganization` /organization List organizations
`Get-MgBetaOrganization` /organization/{organizationId} Get organization
`Get-MgBetaOrganizationBranding` /organization/{organizationId}/branding Get organizationalBranding
`Get-MgBetaOrganizationBrandingLocalization` /organization/{organizationId}/branding/localizations List localizations
`Get-MgBetaOrganizationBrandingLocalization` /organization/{organizationId}/branding/localizations/{organizationalBrandingLocalizationId} Get organizationalBrandingLocalization
`Get-MgBetaOrganizationBrandingLocalizationBannerLogo` /organization/{organizationId}/branding Get organizationalBranding
`Get-MgBetaOrganizationBrandingLocalizationBannerLogo` /organization/{organizationId}/branding/localizations/{organizationalBrandingLocalizationId} Get organizationalBrandingLocalization
`Get-MgBetaOrganizationCertificateBasedAuthConfiguration` /organization/{id}/certificateBasedAuthConfiguration List certificateBasedAuthConfigurations
`Get-MgBetaOrganizationCertificateBasedAuthConfiguration` /organization/{id}/certificateBasedAuthConfiguration/{id} Get certificateBasedAuthConfiguration
`Get-MgBetaOrganizationSettingContactInsight` /organization/{organizationId}/settings/contactInsights List contactInsights
`Get-MgBetaOrganizationSettingMicrosoftApplicationDataAccess` /organization/{organizationId}/settings/microsoftApplicationDataAccess List microsoftApplicationDataAccessSettings
`Get-MgBetaSubscribedSku` /subscribedSkus List subscribedSkus
`Get-MgBetaSubscribedSku` /subscribedSkus/{id} Get subscribedSku

Code Examples

C# / .NET SDK

Get certificateBasedAuthConfiguration

View official example on Microsoft Learn

// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Organization["{organization-id}"].CertificateBasedAuthConfiguration["{certificateBasedAuthConfiguration-id}"].GetAsync();

JavaScript

Get certificateBasedAuthConfiguration

View official example on Microsoft Learn

const options = {
	authProvider,
};

const client = Client.init(options);

let certificateBasedAuthConfiguration = await client.api('/organization/{id}/certificateBasedAuthConfiguration/{id}')
	.get();

PowerShell

Get certificateBasedAuthConfiguration

View official example on Microsoft Learn

Import-Module Microsoft.Graph.Identity.SignIns

Get-MgOrganizationCertificateBasedAuthConfiguration -OrganizationId $organizationId -CertificateBasedAuthConfigurationId $certificateBasedAuthConfigurationId

Python

Get certificateBasedAuthConfiguration

View official example on Microsoft Learn

# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.organization.by_organization_id('organization-id').certificate_based_auth_configuration.by_certificate_based_auth_configuration_id('certificateBasedAuthConfiguration-id').get()

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for Organization.Read.All

4

Grant Admin Consent

Application permissions always require admin consent.