ESC
Type to search...
↑↓ Navigate ↵ Open ESC Close

UserAuthMethod-Phone.ReadWrite.All

Export JSON
Export CSV
Copy URL
Print
ApplicationDelegated Read/Write All Resources

Allows the application to read and write phone methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.

Permission data: April 6, 2026 at 4:06 AM UTC
Delegated Access App-Only Access

Permission Details

Application Permission

Read and write all users' phone methods

Allows the application to read and write phone methods of all users in your organization, without a signed-in user. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.

Permission ID: 6e85d483-7092-4375-babe-0a94a8213a58
Delegated Permission User consent allowed

Read and write all users' phone methods.

Allows the app to read and write Phone methods of all users in your organization that the signed-in user has access to. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.

User sees: Allows the app to read and write phone methods of all users you have access to in your organization. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.
Permission ID: 48c99302-9a24-4f27-a8a7-acef4debba14

Properties

Microsoft Graph v1.0 endpoint-derived-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property Type Description
id String Unique identifier. Read-only.
emailMethods emailAuthenticationMethod collection The email address registered to a user for authentication.
externalAuthenticationMethods externalAuthenticationMethod collection Represents the external MFA registered to a user for authentication using an external identity provider.
fido2Methods fido2AuthenticationMethod collection Represents the FIDO2 security keys registered to a user for authentication.
methods authenticationMethod collection Represents all authentication methods registered to a user.
microsoftAuthenticatorMethods microsoftAuthenticatorAuthenticationMethod collection The details of the Microsoft Authenticator app registered to a user for authentication.
operations longRunningOperation collection Represents the status of a long-running operation, such as a password reset operation.
passwordMethods passwordAuthenticationMethod collection Represents the password registered to a user for authentication. For security, the password itself is never returned in the object, but action can be taken to reset a password.
phoneMethods phoneAuthenticationMethod collection The phone numbers registered to a user for authentication.
platformCredentialMethods platformCredentialAuthenticationMethod collection Represents a platform credential instance registered to a user on Mac OS.
softwareOathMethods softwareOathAuthenticationMethod collection The software OATH time-based one-time password (TOTP) applications registered to a user for authentication.
temporaryAccessPassMethods temporaryAccessPassAuthenticationMethod collection Represents a Temporary Access Pass registered to a user for authentication through time-limited passcodes.
windowsHelloForBusinessMethods windowsHelloForBusinessAuthenticationMethod collection Represents the Windows Hello for Business authentication method registered to a user for authentication.

JSON Representation

Microsoft Graph v1.0 endpoint-derived-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation 
{
  "@odata.type": "#microsoft.graph.authentication"
}

Relationships

Microsoft Graph v1.0 endpoint-derived-docs

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship Type Description
emailMethods emailAuthenticationMethod collection The email address registered to a user for authentication.
externalAuthenticationMethods externalAuthenticationMethod collection Represents the external MFA registered to a user for authentication using an external identity provider.
fido2Methods fido2AuthenticationMethod collection Represents the FIDO2 security keys registered to a user for authentication.
methods authenticationMethod collection Represents all authentication methods registered to a user.
microsoftAuthenticatorMethods microsoftAuthenticatorAuthenticationMethod collection The details of the Microsoft Authenticator app registered to a user for authentication.
operations longRunningOperation collection Represents the status of a long-running operation, such as a password reset operation.
passwordMethods passwordAuthenticationMethod collection Represents the password registered to a user for authentication. For security, the password itself is never returned in the object, but action can be taken to reset a password.
platformCredentialMethods platformCredentialAuthenticationMethod collection Represents a platform credential instance registered to a user on Mac OS.
phoneMethods phoneAuthenticationMethod collection The phone numbers registered to a user for authentication.
softwareOathMethods softwareOathAuthenticationMethod collection The software OATH time-based one-time password (TOTP) applications registered to a user for authentication.
temporaryAccessPassMethods temporaryAccessPassAuthenticationMethod collection Represents a Temporary Access Pass registered to a user for authentication through time-limited passcodes.
windowsHelloForBusinessMethods windowsHelloForBusinessAuthenticationMethod collection Represents the Windows Hello for Business authentication method registered to a user for authentication.
hardwareOathMethods hardwareOathAuthenticationMethod collection The hardware OATH time-based one-time password (TOTP) devices assigned to a user for authentication.
passwordlessMicrosoftAuthenticatorMethods passwordlessMicrosoftAuthenticatorAuthenticationMethod collection Represents the Microsoft Authenticator Passwordless Phone Sign-in methods registered to a user for authentication.

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /me/authentication/phoneMethods
GET /me/authentication/phoneMethods/{phoneMethodId}
GET /users/{id | userPrincipalName}/authentication/phoneMethods
GET /users/{userId | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
POST /me/authentication/phoneMethods/{id}/enableSmsSignIn
POST /me/authentication/phoneMethods/{mobilePhoneMethodId}/disableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/phoneMethods
POST /users/{id | userPrincipalName}/authentication/phoneMethods/{id}/enableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/phoneMethods/{mobilePhoneMethodId}/disableSmsSignIn
PATCH /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
DELETE /me/authentication/phoneMethods/{phoneMethodId}
DELETE /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /me/authentication/phoneMethods
GET /me/authentication/phoneMethods/{phoneMethodId}
GET /users/{id | userPrincipalName}/authentication/phoneMethods
GET /users/{userId | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
POST /me/authentication/phoneMethods/{id}/enableSmsSignIn
POST /me/authentication/phoneMethods/{mobilePhoneMethodId}/disableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/phoneMethods
POST /users/{id | userPrincipalName}/authentication/phoneMethods/{id}/enableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/phoneMethods/{mobilePhoneMethodId}/disableSmsSignIn
PATCH /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
DELETE /me/authentication/phoneMethods/{phoneMethodId}
DELETE /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgUserAuthenticationPhoneMethod /me/authentication/phoneMethods
List phoneMethods
Get-MgUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Get phoneAuthenticationMethod
New-MgUserAuthenticationPhoneMethod /users/{id | userPrincipalName}/authentication/phoneMethods
Create phoneMethod
Remove-MgUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Delete phoneAuthenticationMethod
Update-MgUserAuthenticationPhoneMethod /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
Update phoneAuthenticationMethod
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgBetaUserAuthenticationPhoneMethod /me/authentication/phoneMethods
List phoneMethods
Get-MgBetaUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Get phoneAuthenticationMethod
New-MgBetaUserAuthenticationPhoneMethod /users/{id | userPrincipalName}/authentication/phoneMethods
Create phoneAuthenticationMethod
Remove-MgBetaUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Delete phoneAuthenticationMethod
Update-MgBetaUserAuthenticationPhoneMethod /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
Update phoneAuthenticationMethod

Code Examples

C# / .NET SDK
phoneAuthenticationMethod: disableSmsSignIn
View official example on Microsoft Learn
// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
await graphClient.Me.Authentication.PhoneMethods["{phoneAuthenticationMethod-id}"].DisableSmsSignIn.PostAsync();
JavaScript
phoneAuthenticationMethod: disableSmsSignIn
View official example on Microsoft Learn
const options = {
	authProvider,
};

const client = Client.init(options);

await client.api('/me/authentication/phoneMethods/3179e48a-750b-4051-897c-87b9720928f7/disableSmsSignIn')
	.post();
PowerShell
phoneAuthenticationMethod: disableSmsSignIn
View official example on Microsoft Learn
Import-Module Microsoft.Graph.Identity.SignIns
# A UPN can also be used as -UserId.
Disable-MgUserAuthenticationPhoneMethodSmsSignIn -UserId $userId -PhoneAuthenticationMethodId $phoneAuthenticationMethodId
Python
phoneAuthenticationMethod: disableSmsSignIn
View official example on Microsoft Learn
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

await graph_client.me.authentication.phone_methods.by_phone_authentication_method_id('phoneAuthenticationMethod-id').disable_sms_sign_in.post()

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for UserAuthMethod-Phone.ReadWrite.All

4

Grant Admin Consent

Application permissions always require admin consent.