ESC
Type to search...

Printer.ReadWrite.All

Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated Read/Write All Resources

Allows the application to read and update printers without a signed-in user. Does not allow creating (registering) or deleting (unregistering) printers.

Delegated Access App-Only Access

Permission Details

Application Permission

Read and update printers

Allows the application to read and update printers without a signed-in user. Does not allow creating (registering) or deleting (unregistering) printers.

Delegated Permission Admin consent required

Read and update printers

Allows the application to read and update printers on behalf of the signed-in user. Does not allow creating (registering) or deleting (unregistering) printers.

Properties

Property Type Description
id string The unique identifier for an entity. Read-only.
isAcceptingJobs booleanNullable Specifies whether the printer/printerShare is currently accepting new print jobs.
model stringNullable The model name of the printer/printerShare.
capabilities object The capabilities of the printer/printerShare.
jobs microsoft.graph.printJob collection The list of jobs that are queued for printing by the printer/printerShare.
defaults object The default print settings of printer/printerShare.
name stringNullable
location object The physical and/or organizational location of the printer/printerShare.
manufacturer stringNullable The manufacturer of the printer/printerShare.
status microsoft.graph.printerStatus
displayName string The name of the printer/printerShare.

Relationships

Relationship Type Description
connectors printConnector collection The connectors that are associated with the printer.
jobs printJob collection The list of jobs that are queued for printing by the printer/printerShare.
shares printerShare collection The list of printerShares that are associated with the printer. Currently, only one printerShare can be associated with the printer. Read-only. Nullable.
taskTriggers printTaskTrigger collection A list of task triggers that are associated with the printer.

Graph Methods

Delegated access App-only access
Methods
GET /print/operations/{printOperationId}
GET /print/printers
GET /print/printers/{id}
GET /print/printers/{printerId}/taskTriggers
GET /print/printers/{printerId}/taskTriggers/{printTaskTriggerId}
GET /print/services
GET /print/services/{printServiceId}
GET /print/services/{printServiceId}/endpoints
GET /print/services/{printServiceId}/endpoints/{printServiceEndpointId}
GET /print/shares/{id}/printer
GET /subscriptions
GET /subscriptions/{id}
POST /print/printers/{printerId}/restoreFactoryDefaults
POST /print/printers/{printerId}/taskTriggers
POST /print/printers/create
POST /subscriptions
POST /subscriptions/{subscriptionsId}/reauthorize
PATCH /print/printers/{printerId}
PATCH /subscriptions/{id}
DELETE /print/printers/{printerId}/taskTriggers/{printTaskTriggerId}
DELETE /subscriptions/{subscription-id}
Methods
GET /print/operations/{id}
GET /print/printers
GET /print/printers/{id}
GET /print/printers/{id}/getCapabilities
GET /print/printers/{id}/taskTriggers
GET /print/printers/{id}/taskTriggers/{id}
GET /print/services
GET /print/services/{id}
GET /print/services/{id}/endpoints
GET /print/services/{id}/endpoints/{name}
GET /print/shares/{id}/printer
GET /subscriptions
GET /subscriptions/{id}
GET /subscriptions/getVapidPublicKey
POST /print/printers/{id}/restoreFactoryDefaults
POST /print/printers/{id}/taskTriggers
POST /print/printers/create
POST /subscriptions
POST /subscriptions/{subscriptionsId}/reauthorize
PATCH /print/printers/{id}
PATCH /subscriptions/{id}
DELETE /print/printers/{id}/taskTriggers/{id}
DELETE /subscriptions/{subscription-id}

Code Examples

C# / .NET SDK
// Install: dotnet add package Microsoft.Graph
// Install: dotnet add package Azure.Identity
using Microsoft.Graph;
using Azure.Identity;

// Delegated permissions - interactive user sign-in
var scopes = new[] { "Printer.ReadWrite.All" };
var options = new InteractiveBrowserCredentialOptions
{
    ClientId = "YOUR_CLIENT_ID",
    TenantId = "YOUR_TENANT_ID",
    RedirectUri = new Uri("http://localhost")
};
var credential = new InteractiveBrowserCredential(options);
var graphClient = new GraphServiceClient(credential, scopes);

// Example: GET /me
var result = await graphClient.Me.GetAsync();
Console.WriteLine($"User: {result?.DisplayName}");

// Application permissions - daemon/service app
var tenantId = "YOUR_TENANT_ID";
var clientId = "YOUR_CLIENT_ID";
var clientSecret = "YOUR_CLIENT_SECRET";

var credential = new ClientSecretCredential(tenantId, clientId, clientSecret);
var graphClient = new GraphServiceClient(credential);

// Example: GET /users/{user-id}
var users = await graphClient.Users.GetAsync();
foreach (var user in users?.Value ?? [])
{
    Console.WriteLine($"User: {user.DisplayName}");
}
JavaScript / TypeScript
// npm install @azure/msal-browser @microsoft/microsoft-graph-client
import { PublicClientApplication } from "@azure/msal-browser";
import { Client } from "@microsoft/microsoft-graph-client";
import { AuthCodeMSALBrowserAuthenticationProvider } from 
    "@microsoft/microsoft-graph-client/authProviders/authCodeMsalBrowser";

const msalConfig = {
    auth: {
        clientId: "YOUR_CLIENT_ID",
        authority: "https://login.microsoftonline.com/YOUR_TENANT_ID"
    }
};

const pca = new PublicClientApplication(msalConfig);
await pca.initialize();

// Delegated: Login with required scope
const loginResponse = await pca.loginPopup({
    scopes: ["Printer.ReadWrite.All"]
});

const authProvider = new AuthCodeMSALBrowserAuthenticationProvider(pca, {
    account: loginResponse.account,
    scopes: ["Printer.ReadWrite.All"],
    interactionType: "popup"
});

const graphClient = Client.initWithMiddleware({ authProvider });

// Example: GET /me
const result = await graphClient.api("/me").get();
console.log(result);

// Application: Use client credentials (Node.js backend only)
// npm install @azure/identity @microsoft/microsoft-graph-client
import { ClientSecretCredential } from "@azure/identity";
import { TokenCredentialAuthenticationProvider } from 
    "@microsoft/microsoft-graph-client/authProviders/azureTokenCredentials";

const credential = new ClientSecretCredential(
    "YOUR_TENANT_ID",
    "YOUR_CLIENT_ID", 
    "YOUR_CLIENT_SECRET"
);

const authProvider = new TokenCredentialAuthenticationProvider(credential, {
    scopes: ["https://graph.microsoft.com/.default"]
});

const graphClient = Client.initWithMiddleware({ authProvider });
const result = await graphClient.api("/users").get();
console.log(result);
PowerShell
# Install Microsoft Graph PowerShell module
Install-Module Microsoft.Graph -Scope CurrentUser

# Delegated access - interactive sign-in
Connect-MgGraph -Scopes "Printer.ReadWrite.All"

# Verify connection
Get-MgContext | Select-Object Account, TenantId, Scopes

# Example: GET /me
$result = Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/me"
$result | ConvertTo-Json -Depth 5

# Application access with certificate
$params = @{
    ClientId = "YOUR_CLIENT_ID"
    TenantId = "YOUR_TENANT_ID"
    CertificateThumbprint = "YOUR_CERT_THUMBPRINT"
}
Connect-MgGraph @params

# Or with client secret (not recommended for production)
# Connect-MgGraph -ClientSecretCredential $credential

# Example: GET /users
$result = Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/users"
$result | ConvertTo-Json -Depth 5

# Always disconnect when done
Disconnect-MgGraph
Python
# pip install msgraph-sdk azure-identity
from azure.identity import InteractiveBrowserCredential, ClientSecretCredential
from msgraph import GraphServiceClient
import asyncio

# Delegated permissions - interactive browser sign-in
credential = InteractiveBrowserCredential(
    client_id="YOUR_CLIENT_ID",
    tenant_id="YOUR_TENANT_ID"
)
scopes = ["Printer.ReadWrite.All"]
client = GraphServiceClient(credential, scopes)

async def get_data():
    # Example: GET /me
    result = await client.me.get()
    print(f"User: {result.display_name}")
    return result

asyncio.run(get_data())

# Application permissions - client credentials
credential = ClientSecretCredential(
    tenant_id="YOUR_TENANT_ID",
    client_id="YOUR_CLIENT_ID",
    client_secret="YOUR_CLIENT_SECRET"
)
scopes = ["https://graph.microsoft.com/.default"]
client = GraphServiceClient(credential, scopes)

async def get_users():
    # Example: GET /users
    result = await client.users.get()
    for user in result.value:
        print(f"User: {user.display_name}")
    return result

asyncio.run(get_users())

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or Delegated permissions and search for Printer.ReadWrite.All

4

Grant Admin Consent

Application permissions always require admin consent. Click "Grant admin consent" in the Azure portal.