SecurityIdentitiesHealth.ReadWrite.All

Permission Details

Application Permission

Read and write all identity security health issues

Allows the app to read and write identity security health issues without a signed-in user.

Permission ID: ab03ddd5-7ae4-4f2e-8af8-86654f7e0a27

Delegated Permission

Read and write identity security health issues

Allows the app to read and write identity security health issues on behalf of the signed-in user.

Permission ID: 53e51eec-2d9b-4990-97f3-c9aa5d5652c3

Properties

Microsoft Graph v1.0 endpoint-derived-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property	Type	Description
`alerts`	`alert collection`
`alerts_v2`	`security.alert collection`	A collection of alerts in Microsoft 365 Defender.
`attackSimulation`	`object`
`auditLog`	`object`	The entry point for the audit log query API.
`cases`	`object`
`collaboration`	`object`
`dataSecurityAndGovernance`	`object`
`id`	`string`	The unique identifier for an entity. Read-only.
`identities`	`object`	A container for security identities APIs.
`incidents`	`security.incident collection`	A collection of incidents in Microsoft 365 Defender, each of which is a set of correlated alerts and associated metadata that reflects the story of an attack.
`labels`	`object`
`secureScoreControlProfiles`	`secureScoreControlProfile collection`
`secureScores`	`secureScore collection`
`subjectRightsRequests`	`subjectRightsRequest collection`
`threatIntelligence`	`object`

Showing 15 of 17 properties.

JSON Representation

Microsoft Graph v1.0 endpoint-derived-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation

{}

Relationships

Microsoft Graph v1.0 endpoint-derived-docs

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship	Type	Description
`alerts`	`alert collection`	Read-only. Nullable.
`alertsv2`	`security.alert collection`	A collection of alerts in Microsoft 365 Defender.
`data security and compliance`	`tenantDataSecurityAndGovernance`	A container for Microsoft Purview data security and compliance APIs.
`identities`	`security.identityContainer`	A container for security identities APIs.
`incidents`	`security.incident collection`	A collection of incidents in Microsoft 365 Defender, each of which is a set of correlated alerts and associated metadata that reflects the story of an attack.
`alerts_v2`	`security.alert collection`	A collection of alerts in Microsoft 365 Defender.
`secureScoreControlProfiles`	`secureScoreControlProfile collection`	Related secureScoreControlProfiles data exposed by this resource.
`secureScores`	`secureScore collection`	Related secureScores data exposed by this resource.
`subjectRightsRequests`	`subjectRightsRequest collection`	Related subjectRightsRequests data exposed by this resource.
`cloudAppSecurityProfiles`	`cloudAppSecurityProfile collection`	Related cloudAppSecurityProfiles data exposed by this resource.
`domainSecurityProfiles`	`domainSecurityProfile collection`	Related domainSecurityProfiles data exposed by this resource.
`fileSecurityProfiles`	`fileSecurityProfile collection`	Related fileSecurityProfiles data exposed by this resource.
`hostSecurityProfiles`	`hostSecurityProfile collection`	Related hostSecurityProfiles data exposed by this resource.
`incidentTasks`	`security.incidentTask collection`	A collection of tasks associated with security incidents.
`ipSecurityProfiles`	`ipSecurityProfile collection`	Related ipSecurityProfiles data exposed by this resource.
`providerTenantSettings`	`providerTenantSetting collection`	Related providerTenantSettings data exposed by this resource.
`securityActions`	`securityAction collection`	Related securityActions data exposed by this resource.
`tiIndicators`	`tiIndicator collection`	Deprecated. The tiIndicator entity is deprecated and will be removed by April 2026.
`userSecurityProfiles`	`userSecurityProfile collection`	Related userSecurityProfiles data exposed by this resource.
`zones`	`security.zone collection`	A collection of cloud zones in Microsoft Defender for Cloud that group and manage cloud environments across multiple cloud providers.

Graph Methods

Delegated access App-only access

Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET `/security/identities/healthIssues`
GET `/security/identities/healthIssues/{healthIssueId}`
PATCH `/security/identities/healthIssues/{healthIssueId}`

Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET `/security/identities/healthIssues`
GET `/security/identities/healthIssues/{healthIssueId}`
PATCH `/security/identities/healthIssues/{healthIssueId}`

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
`Get-MgSecurityIdentityHealthIssue` /security/identities/healthIssues List healthIssues
`Get-MgSecurityIdentityHealthIssue` /security/identities/healthIssues/{healthIssueId} Get healthIssue
`Update-MgSecurityIdentityHealthIssue` /security/identities/healthIssues/{healthIssueId} Update healthIssue

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
`Get-MgBetaSecurityIdentityHealthIssue` /security/identities/healthIssues List healthIssues
`Get-MgBetaSecurityIdentityHealthIssue` /security/identities/healthIssues/{healthIssueId} Get healthIssue
`Update-MgBetaSecurityIdentityHealthIssue` /security/identities/healthIssues/{healthIssueId} Update healthIssue

Code Examples

C# / .NET SDK

Update healthIssue

View official example on Microsoft Learn

// Code snippets are only available for the latest version. Current version is 5.x

// Dependencies
using Microsoft.Graph.Models.Security;

var requestBody = new HealthIssue
{
	Status = HealthIssueStatus.Closed,
};

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Security.Identities.HealthIssues["{healthIssue-id}"].PatchAsync(requestBody);

JavaScript

Update healthIssue

View official example on Microsoft Learn

const options = {
	authProvider,
};

const client = Client.init(options);

const healthIssue = {
  status: 'closed'
};

await client.api('/security/identities/healthIssues/b3c1b5fc-828c-45fa-a1e1-10d74f6d6e9c')
	.update(healthIssue);

PowerShell

Update healthIssue

View official example on Microsoft Learn

Import-Module Microsoft.Graph.Security

$params = @{
	status = "closed"
}

Update-MgSecurityIdentityHealthIssue -HealthIssueId $healthIssueId -BodyParameter $params

Python

Update healthIssue

View official example on Microsoft Learn

# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
from msgraph.generated.models.security.health_issue import HealthIssue
from msgraph.generated.models.health_issue_status import HealthIssueStatus
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = HealthIssue(
	status = HealthIssueStatus.Closed,
)

result = await graph_client.security.identities.health_issues.by_health_issue_id('healthIssue-id').patch(request_body)

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for SecurityIdentitiesHealth.ReadWrite.All

4

Grant Admin Consent

Application permissions always require admin consent.

Frequently asked questions

What is the SecurityIdentitiesHealth.ReadWrite.All Microsoft Graph permission?

SecurityIdentitiesHealth.ReadWrite.All is available as both an application permission and a delegated permission in the Microsoft Graph API, grouped under the SecurityIdentitiesHealth category. Allows the app to read and write identity security health issues without a signed-in user. It grants read and write access to resources. Application permissions always require admin consent. It is mapped to the Microsoft Graph security resource type. 6 documented Microsoft Graph REST methods require it. 6 Microsoft Graph PowerShell commands are documented for it.

Is SecurityIdentitiesHealth.ReadWrite.All an application or a delegated permission?

SecurityIdentitiesHealth.ReadWrite.All is available as both an application permission (app-only access, no signed-in user) and a delegated permission (access on behalf of a signed-in user).

Does SecurityIdentitiesHealth.ReadWrite.All require admin consent?

Application permissions always require admin consent.

What is the permission ID (GUID) for SecurityIdentitiesHealth.ReadWrite.All?

For SecurityIdentitiesHealth.ReadWrite.All, the application (app role) ID is ab03ddd5-7ae4-4f2e-8af8-86654f7e0a27, and the delegated (OAuth2 scope) ID is 53e51eec-2d9b-4990-97f3-c9aa5d5652c3. These are the real Microsoft Graph identifiers and can be used directly in an app registration manifest.