ESC
Type to search...

PeopleSettings.ReadWrite.All

Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated Read/Write All Resources

Allows the application to read and write tenant-wide people settings without a signed-in user.

In short

PeopleSettings.ReadWrite.All is available as both an application permission and a delegated permission in the Microsoft Graph API, grouped under the PeopleSettings category. Allows the application to read and write tenant-wide people settings without a signed-in user. It grants read and write access to resources. Application permissions always require admin consent.

Permission data: October 3, 2026 at 3:19 AM UTC
Delegated Access App-Only Access

Permission Details

Application Permission

Read and write all tenant-wide people settings

Allows the application to read and write tenant-wide people settings without a signed-in user.

Delegated Permission Admin consent required

Read and write tenant-wide people settings

Allows the application to read and write tenant-wide people settings on behalf of the signed-in user.

Properties

Microsoft Graph v1.0 endpoint-derived-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property Type Description
configurationManagement object A container for Tenant Configuration Management (TCM) resources. Read-only.
edge object A container for Microsoft Edge resources. Read-only.
exchange object A container for the Exchange admin functionality. Read-only.
microsoft365Apps object A container for the Microsoft 365 apps admin functionality.
people object Represents a setting to control people-related admin settings in the tenant.
reportSettings object A container for administrative resources to manage reports.
serviceAnnouncement object A container for service communications resources. Read-only.
sharepoint object
teams object A container for Teams administration functionalities, such as Teams telephone number management functionalities, user Teams configurations, and policy assignments.

JSON Representation

Microsoft Graph v1.0 endpoint-derived-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation
{
  "@odata.type": "#microsoft.graph.admin"
}

Relationships

Microsoft Graph v1.0 endpoint-derived-docs

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship Type Description
configurationManagement configurationManagement A container for Tenant Configuration Management (TCM) resources. Read-only.
edge edge A container for Microsoft Edge resources. Read-only.
exchange exchangeAdmin A container for the Exchange admin functionality. Read-only.
microsoft365Apps adminMicrosoft365Apps A container for the Microsoft 365 apps admin functionality.
people peopleAdminSettings Represents a setting to control people-related admin settings in the tenant.
reportSettings adminReportSettings A container for administrative resources to manage reports.
serviceAnnouncement serviceAnnouncement A container for service communications resources. Read-only.
sharepointSettings sharepointSettings A container for administrative resources to manage tenant-level settings for SharePoint and OneDrive.
teams teamsAdministration.teamsAdminRoot A container for Teams administration functionalities, such as Teams telephone number management functionalities, user Teams configurations, and policy assignments.

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /admin/people
GET /admin/people/itemInsights
GET /admin/people/profileCardProperties
GET /admin/people/profilePropertySettings
GET /admin/people/profilePropertySettings/{profilePropertySettingId}
GET /admin/people/profileSources
GET /admin/people/profileSources(sourceId='{sourceId}')
GET /admin/people/pronouns
POST /admin/people/profileCardProperties
POST /admin/people/profilePropertySettings
POST /admin/people/profileSources
PATCH /admin/people/itemInsights
PATCH /admin/people/profileCardProperties/{id}
PATCH /admin/people/profilePropertySettings/{profilePropertySettingId}
PATCH /admin/people/profileSources(sourceId='{sourceId}')
PATCH /admin/people/pronouns
DELETE /admin/people/profileCardProperties/{id}
DELETE /admin/people/profilePropertySettings/{profilePropertySettingId}
DELETE /admin/people/profileSources(sourceId='{sourceId}')
Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /admin/people
GET /admin/people/itemInsights
GET /admin/people/namePronunciation
GET /admin/people/photoUpdateSettings
GET /admin/people/profileCardProperties
GET /admin/people/profilePropertySettings
GET /admin/people/profilePropertySettings/{profilePropertySettingId}
GET /admin/people/profileSources
GET /admin/people/profileSources(sourceId='{sourceId}')
GET /admin/people/pronouns
GET /copilot/settings/people/enhancedpersonalization
POST /admin/people/profileCardProperties
POST /admin/people/profilePropertySettings
POST /admin/people/profileSources
PATCH /admin/people/itemInsights
PATCH /admin/people/namePronunciation
PATCH /admin/people/photoUpdateSettings
PATCH /admin/people/profileCardProperties/{id}
PATCH /admin/people/profilePropertySettings/{profilePropertySettingId}
PATCH /admin/people/profileSources(sourceId='{sourceId}')
PATCH /admin/people/pronouns
PATCH /copilot/settings/people/enhancedpersonalization
PATCH /organization/{organizationId}/settings/contactInsights
PATCH /organization/{organizationId}/settings/peopleInsights
DELETE /admin/people/profileCardProperties/{id}
DELETE /admin/people/profilePropertySettings/{profilePropertySettingId}
DELETE /admin/people/profileSources(sourceId='{sourceId}')
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgAdminPeople /admin/people
Get peopleAdminSettings
Get-MgAdminPeopleItemInsight /admin/people/itemInsights
List itemInsights
Get-MgAdminPeopleProfileCardProperty /admin/people/profileCardProperties
List profileCardProperties
Get-MgAdminPeopleProfilePropertySetting /admin/people/profilePropertySettings
List profilePropertySettings
Get-MgAdminPeopleProfilePropertySetting /admin/people/profilePropertySettings/{profilePropertySettingId}
Get profilePropertySetting
Get-MgAdminPeopleProfileSource /admin/people/profileSources
List profileSources
Get-MgAdminPeopleProfileSourceBySourceId /admin/people/profileSources(sourceId='{sourceId}')
Get profileSource
Get-MgAdminPeoplePronoun /admin/people/pronouns
List pronounsSettings
New-MgAdminPeopleProfileCardProperty /admin/people/profileCardProperties
Create profileCardProperty
New-MgAdminPeopleProfilePropertySetting /admin/people/profilePropertySettings
Create profilePropertySetting
New-MgAdminPeopleProfileSource /admin/people/profileSources
Create profileSource
Remove-MgAdminPeopleProfileCardProperty /admin/people/profileCardProperties/{id}
Delete profileCardProperty
Remove-MgAdminPeopleProfilePropertySetting /admin/people/profilePropertySettings/{profilePropertySettingId}
Delete profilePropertySetting
Remove-MgAdminPeopleProfileSourceBySourceId /admin/people/profileSources(sourceId='{sourceId}')
Delete profileSource
Update-MgAdminPeopleItemInsight /admin/people/itemInsights
Update insights
Update-MgAdminPeopleProfileCardProperty /admin/people/profileCardProperties/{id}
Update profileCardProperty
Update-MgAdminPeopleProfilePropertySetting /admin/people/profilePropertySettings/{profilePropertySettingId}
Update profilePropertySetting
Update-MgAdminPeopleProfileSourceBySourceId /admin/people/profileSources(sourceId='{sourceId}')
Update profileSource
Update-MgAdminPeoplePronoun /admin/people/pronouns
Update pronounsSettings
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgBetaAdminPeople /admin/people
Get peopleAdminSettings
Get-MgBetaAdminPeopleItemInsight /admin/people/itemInsights
List itemInsights
Get-MgBetaAdminPeopleNamePronunciation /admin/people/namePronunciation
Get namePronunciationSettings
Get-MgBetaAdminPeoplePhotoUpdateSetting /admin/people/photoUpdateSettings
List photoUpdateSettings
Get-MgBetaAdminPeopleProfileCardProperty /admin/people/profileCardProperties
List profileCardProperties
Get-MgBetaAdminPeopleProfilePropertySetting /admin/people/profilePropertySettings
List profilePropertySettings
Get-MgBetaAdminPeopleProfilePropertySetting /admin/people/profilePropertySettings/{profilePropertySettingId}
Get profilePropertySetting
Get-MgBetaAdminPeopleProfileSource /admin/people/profileSources
List profileSources
Get-MgBetaAdminPeopleProfileSourceBySourceId /admin/people/profileSources(sourceId='{sourceId}')
Get profileSource
Get-MgBetaAdminPeoplePronoun /admin/people/pronouns
List pronounsSettings
New-MgBetaAdminPeopleProfileCardProperty /admin/people/profileCardProperties
Create profileCardProperty
New-MgBetaAdminPeopleProfilePropertySetting /admin/people/profilePropertySettings
Create profilePropertySetting
New-MgBetaAdminPeopleProfileSource /admin/people/profileSources
Create profileSource
Remove-MgBetaAdminPeopleProfileCardProperty /admin/people/profileCardProperties/{id}
Delete profileCardProperty
Remove-MgBetaAdminPeopleProfilePropertySetting /admin/people/profilePropertySettings/{profilePropertySettingId}
Delete profilePropertySetting
Remove-MgBetaAdminPeopleProfileSourceBySourceId /admin/people/profileSources(sourceId='{sourceId}')
Delete profileSource
Update-MgBetaAdminPeopleItemInsight /organization/{organizationId}/settings/contactInsights
Update insights
Update-MgBetaAdminPeopleNamePronunciation /admin/people/namePronunciation
Update namePronunciationSettings
Update-MgBetaAdminPeoplePhotoUpdateSetting /admin/people/photoUpdateSettings
Update photoUpdateSettings
Update-MgBetaAdminPeopleProfileCardProperty /admin/people/profileCardProperties/{id}
Update profileCardProperty
Update-MgBetaAdminPeopleProfilePropertySetting /admin/people/profilePropertySettings/{profilePropertySettingId}
Update profilePropertySetting
Update-MgBetaAdminPeopleProfileSourceBySourceId /admin/people/profileSources(sourceId='{sourceId}')
Update profileSource
Update-MgBetaAdminPeoplePronoun /admin/people/pronouns
Update pronounsSettings
Update-MgBetaOrganizationSettingContactInsight /organization/{organizationId}/settings/contactInsights
Update insights
Update-MgBetaOrganizationSettingPersonInsight /organization/{organizationId}/settings/contactInsights
Update insights

Code Examples

C# / .NET SDK
Create profileCardProperty
// Code snippets are only available for the latest version. Current version is 5.x

// Dependencies
using Microsoft.Graph.Models;

var requestBody = new ProfileCardProperty
{
	Annotations = new List<ProfileCardAnnotation>
	{
		new ProfileCardAnnotation
		{
			DisplayName = "Cost Center",
			Localizations = new List<DisplayNameLocalization>
			{
				new DisplayNameLocalization
				{
					LanguageTag = "ru",
					DisplayName = "центр затрат",
				},
			},
		},
	},
	DirectoryPropertyName = "CustomAttribute1",
	IsVisible = true,
};

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Admin.People.ProfileCardProperties.PostAsync(requestBody);
JavaScript
Create profileCardProperty
const options = {
	authProvider,
};

const client = Client.init(options);

const profileCardProperty = {
  annotations: [
    {
      displayName: 'Cost Center',
      localizations: [
        {
          languageTag: 'ru',
          displayName: 'центр затрат'
        }
      ]
    }
  ],
  directoryPropertyName: 'CustomAttribute1',
  isVisible: true
};

await client.api('/admin/people/profileCardProperties')
	.post(profileCardProperty);
PowerShell
Create profileCardProperty
Import-Module Microsoft.Graph.Identity.DirectoryManagement

$params = @{
	annotations = @(
		@{
			displayName = "Cost Center"
			localizations = @(
				@{
					languageTag = "ru"
					displayName = "центр затрат"
				}
			)
		}
	)
	directoryPropertyName = "CustomAttribute1"
	isVisible = $true
}

New-MgAdminPeopleProfileCardProperty -BodyParameter $params
Python
Create profileCardProperty
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
from msgraph.generated.models.profile_card_property import ProfileCardProperty
from msgraph.generated.models.profile_card_annotation import ProfileCardAnnotation
from msgraph.generated.models.display_name_localization import DisplayNameLocalization
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = ProfileCardProperty(
	annotations = [
		ProfileCardAnnotation(
			display_name = "Cost Center",
			localizations = [
				DisplayNameLocalization(
					language_tag = "ru",
					display_name = "центр затрат",
				),
			],
		),
	],
	directory_property_name = "CustomAttribute1",
	is_visible = True,
)

result = await graph_client.admin.people.profile_card_properties.post(request_body)

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for PeopleSettings.ReadWrite.All

4

Grant Admin Consent

Application permissions always require admin consent.

Frequently asked questions

What is the PeopleSettings.ReadWrite.All Microsoft Graph permission?

PeopleSettings.ReadWrite.All is available as both an application permission and a delegated permission in the Microsoft Graph API, grouped under the PeopleSettings category. Allows the application to read and write tenant-wide people settings without a signed-in user. It grants read and write access to resources. Application permissions always require admin consent. It is mapped to the Microsoft Graph admin resource type. 46 documented Microsoft Graph REST methods require it. 44 Microsoft Graph PowerShell commands are documented for it.

Is PeopleSettings.ReadWrite.All an application or a delegated permission?

PeopleSettings.ReadWrite.All is available as both an application permission (app-only access, no signed-in user) and a delegated permission (access on behalf of a signed-in user).

Does PeopleSettings.ReadWrite.All require admin consent?

Application permissions always require admin consent.

What is the permission ID (GUID) for PeopleSettings.ReadWrite.All?

For PeopleSettings.ReadWrite.All, the application (app role) ID is b6890674-9dd5-4e42-bb15-5af07f541ae1, and the delegated (OAuth2 scope) ID is e67e6727-c080-415e-b521-e3f35d5248e9. These are the real Microsoft Graph identifiers and can be used directly in an app registration manifest.