ESC
Type to search...

RiskPreventionProviders.ReadWrite.All

Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated Read/Write All Resources

Allows the app to read and write your organization's risk prevention providers, without a signed-in user.

Permission data: April 6, 2026 at 4:06 AM UTC
Delegated Access App-Only Access

Permission Details

Application Permission

Read and write all identity risk prevention providers

Allows the app to read and write your organization's risk prevention providers, without a signed-in user.

Delegated Permission Admin consent required

Read and write all identity risk prevention providers

Allows the app to read and write your organization's risk prevention providers, on behalf of the signed-in user.

Properties

Microsoft Graph v1.0 endpoint-derived-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property Type Description
displayName StringNullable The display name of the identity., , For drive items, the display name might not always be available or up to date. For example, if a user changes their display name the API might show the new value in a future response, but the items associated with the user don't show up as changed when using delta.
id StringNullable Unique identifier for the identity or actor. For example, in the access reviews decisions API, this property might record the id of the principal, that is, the group, user, or application that's subject to review.
tenantId String Unique identity of the tenant. Optional.
thumbnails thumbnailSet Keyed collection of thumbnail resources. Optional. Applies to drive items, for example.

JSON Representation

Microsoft Graph v1.0 endpoint-derived-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation
{
  "displayName": "String",
  "id": "String (identifier)",
  "tenantId": "String",
  "thumbnails": {
    "@odata.type": "microsoft.graph.thumbnailSet"
  }
}

Relationships

Relationships metadata is not available for this permission mapping.

View resource documentation

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /identity/riskPrevention/fraudProtectionProviders
GET /identity/riskPrevention/fraudProtectionProviders/{fraudProtectionProviderId}
GET /identity/riskPrevention/webApplicationFirewallProviders
GET /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}
GET /identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModelId}
POST /identity/riskPrevention/fraudProtectionProviders
POST /identity/riskPrevention/webApplicationFirewallProviders
POST /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}/verify
PATCH /identity/riskPrevention/fraudProtectionProviders/{fraudProtectionProviderId}
PATCH /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}
DELETE /identity/riskPrevention/fraudProtectionProviders/{id}
DELETE /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}
DELETE /identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModelId}
Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /identity/riskPrevention/fraudProtectionProviders
GET /identity/riskprevention/fraudprotectionproviders/{fraudProtectionProviderId}
GET /identity/riskPrevention/webApplicationFirewallProviders
GET /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}
GET /identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModelId}
POST /identity/riskPrevention/fraudProtectionProviders
POST /identity/riskPrevention/webApplicationFirewallProviders
POST /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}/verify
PATCH /identity/riskprevention/fraudprotectionproviders/{fraudProtectionProviderId}
PATCH /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}
DELETE /identity/riskPrevention/fraudProtectionProviders/{id}
DELETE /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}
DELETE /identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModelId}
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgIdentityRiskPreventionFraudProtectionProvider /identity/riskPrevention/fraudProtectionProviders
List fraudProtectionProviders
Get-MgIdentityRiskPreventionFraudProtectionProvider /identity/riskPrevention/fraudProtectionProviders/{fraudProtectionProviderId}
Get fraudProtectionProvider
Get-MgIdentityRiskPreventionWebApplicationFirewallProvider /identity/riskPrevention/webApplicationFirewallProviders
List webApplicationFirewallProvider objects
Get-MgIdentityRiskPreventionWebApplicationFirewallProvider /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}
Get webApplicationFirewallProvider
Get-MgIdentityRiskPreventionWebApplicationFirewallVerification /identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModelId}
Get webApplicationFirewallVerificationModel
New-MgIdentityRiskPreventionFraudProtectionProvider /identity/riskPrevention/fraudProtectionProviders
Create fraudProtectionProviders
New-MgIdentityRiskPreventionWebApplicationFirewallProvider /identity/riskPrevention/webApplicationFirewallProviders
Create webApplicationFirewallProvider
Remove-MgIdentityRiskPreventionFraudProtectionProvider /identity/riskPrevention/fraudProtectionProviders/{id}
Delete fraudProtectionProviders
Remove-MgIdentityRiskPreventionWebApplicationFirewallProvider /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}
Delete webApplicationFirewallProvider
Remove-MgIdentityRiskPreventionWebApplicationFirewallVerification /identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModelId}
Delete webApplicationFirewallVerificationModel
Update-MgIdentityRiskPreventionFraudProtectionProvider /identity/riskPrevention/fraudProtectionProviders/{fraudProtectionProviderId}
Update fraudProtectionProvider
Update-MgIdentityRiskPreventionWebApplicationFirewallProvider /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}
Update webApplicationFirewallProvider
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgBetaIdentityRiskPreventionFraudProtectionProvider /identity/riskPrevention/fraudProtectionProviders
List fraudProtectionProviders
Get-MgBetaIdentityRiskPreventionFraudProtectionProvider /identity/riskprevention/fraudprotectionproviders/{fraudProtectionProviderId}
Get fraudProtectionProvider
Get-MgBetaIdentityRiskPreventionWebApplicationFirewallProvider /identity/riskPrevention/webApplicationFirewallProviders
List webApplicationFirewallProvider objects
Get-MgBetaIdentityRiskPreventionWebApplicationFirewallProvider /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}
Get webApplicationFirewallProvider
Get-MgBetaIdentityRiskPreventionWebApplicationFirewallVerification /identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModelId}
Get webApplicationFirewallVerificationModel
New-MgBetaIdentityRiskPreventionFraudProtectionProvider /identity/riskPrevention/fraudProtectionProviders
Create fraudProtectionProviders
New-MgBetaIdentityRiskPreventionWebApplicationFirewallProvider /identity/riskPrevention/webApplicationFirewallProviders
Create webApplicationFirewallProvider
Remove-MgBetaIdentityRiskPreventionFraudProtectionProvider /identity/riskPrevention/fraudProtectionProviders/{id}
Delete fraudProtectionProviders
Remove-MgBetaIdentityRiskPreventionWebApplicationFirewallProvider /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}
Delete webApplicationFirewallProvider
Remove-MgBetaIdentityRiskPreventionWebApplicationFirewallVerification /identity/riskPrevention/webApplicationFirewallVerifications/{webApplicationFirewallVerificationModelId}
Delete webApplicationFirewallVerificationModel
Update-MgBetaIdentityRiskPreventionFraudProtectionProvider /identity/riskprevention/fraudprotectionproviders/{fraudProtectionProviderId}
Update fraudProtectionProvider
Update-MgBetaIdentityRiskPreventionWebApplicationFirewallProvider /identity/riskPrevention/webApplicationFirewallProviders/{webApplicationFirewallProviderId}
Update webApplicationFirewallProvider

Code Examples

C# / .NET SDK
Create fraudProtectionProviders
// Code snippets are only available for the latest version. Current version is 5.x

// Dependencies
using Microsoft.Graph.Models;

var requestBody = new ArkoseFraudProtectionProvider
{
	OdataType = "#microsoft.graph.arkoseFraudProtectionProvider",
	DisplayName = "Arkose Sign-Up Protection",
	PublicKey = "A1EE42E0-C88B-47FE-A176-5E9FB8F116FB",
	PrivateKey = "19BBE628-7DEF-4E28-AB25-BF129C760B7E",
	ClientSubDomain = "client-api",
	VerifySubDomain = "verify-api",
};

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Identity.RiskPrevention.FraudProtectionProviders.PostAsync(requestBody);
JavaScript
Create fraudProtectionProviders
const options = {
	authProvider,
};

const client = Client.init(options);

const fraudProtectionProvider = {
   '@odata.type': '#microsoft.graph.arkoseFraudProtectionProvider',
    displayName: 'Arkose Sign-Up Protection',
    publicKey: 'A1EE42E0-C88B-47FE-A176-5E9FB8F116FB',
    privateKey: '19BBE628-7DEF-4E28-AB25-BF129C760B7E',
    clientSubDomain: 'client-api',
    verifySubDomain: 'verify-api'
};

await client.api('/identity/riskPrevention/fraudProtectionProviders')
	.post(fraudProtectionProvider);
PowerShell
Create fraudProtectionProviders
Import-Module Microsoft.Graph.Identity.SignIns

$params = @{
	"@odata.type" = "#microsoft.graph.arkoseFraudProtectionProvider"
	displayName = "Arkose Sign-Up Protection"
	publicKey = "A1EE42E0-C88B-47FE-A176-5E9FB8F116FB"
	privateKey = "19BBE628-7DEF-4E28-AB25-BF129C760B7E"
	clientSubDomain = "client-api"
	verifySubDomain = "verify-api"
}

New-MgIdentityRiskPreventionFraudProtectionProvider -BodyParameter $params
Python
Create fraudProtectionProviders
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
from msgraph.generated.models.arkose_fraud_protection_provider import ArkoseFraudProtectionProvider
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = ArkoseFraudProtectionProvider(
	odata_type = "#microsoft.graph.arkoseFraudProtectionProvider",
	display_name = "Arkose Sign-Up Protection",
	public_key = "A1EE42E0-C88B-47FE-A176-5E9FB8F116FB",
	private_key = "19BBE628-7DEF-4E28-AB25-BF129C760B7E",
	client_sub_domain = "client-api",
	verify_sub_domain = "verify-api",
)

result = await graph_client.identity.risk_prevention.fraud_protection_providers.post(request_body)

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for RiskPreventionProviders.ReadWrite.All

4

Grant Admin Consent

Application permissions always require admin consent.