ESC
Type to search...
↑↓ Navigate ↵ Open ESC Close

UserAuthMethod-Phone.ReadWrite

Export JSON
Export CSV
Copy URL
Print
Delegated Read/Write User Scope

Allows the app to read and write the signed-in user's phone authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.

Permission data: April 6, 2026 at 4:06 AM UTC
Delegated Access App-Only Access

Permission Details

Delegated Permission User consent allowed

Read and write the signed-in user's phone authentication methods

Allows the app to read and write the signed-in user's phone authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.

User sees: Allows the app to read and write your phone authentication methods. This does not allow the app to see secret information like passwords, or to sign-in or otherwise use the authentication methods.
Permission ID: 6c4aad61-f76b-46ad-a22c-57d4d3d962af

Properties

Microsoft Graph v1.0 endpoint-derived-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property Type Description
id String Unique identifier. Read-only.
emailMethods emailAuthenticationMethod collection The email address registered to a user for authentication.
externalAuthenticationMethods externalAuthenticationMethod collection Represents the external MFA registered to a user for authentication using an external identity provider.
fido2Methods fido2AuthenticationMethod collection Represents the FIDO2 security keys registered to a user for authentication.
methods authenticationMethod collection Represents all authentication methods registered to a user.
microsoftAuthenticatorMethods microsoftAuthenticatorAuthenticationMethod collection The details of the Microsoft Authenticator app registered to a user for authentication.
operations longRunningOperation collection Represents the status of a long-running operation, such as a password reset operation.
passwordMethods passwordAuthenticationMethod collection Represents the password registered to a user for authentication. For security, the password itself is never returned in the object, but action can be taken to reset a password.
phoneMethods phoneAuthenticationMethod collection The phone numbers registered to a user for authentication.
platformCredentialMethods platformCredentialAuthenticationMethod collection Represents a platform credential instance registered to a user on Mac OS.
softwareOathMethods softwareOathAuthenticationMethod collection The software OATH time-based one-time password (TOTP) applications registered to a user for authentication.
temporaryAccessPassMethods temporaryAccessPassAuthenticationMethod collection Represents a Temporary Access Pass registered to a user for authentication through time-limited passcodes.
windowsHelloForBusinessMethods windowsHelloForBusinessAuthenticationMethod collection Represents the Windows Hello for Business authentication method registered to a user for authentication.

JSON Representation

Microsoft Graph v1.0 endpoint-derived-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation 
{
  "@odata.type": "#microsoft.graph.authentication"
}

Relationships

Microsoft Graph v1.0 endpoint-derived-docs

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship Type Description
emailMethods emailAuthenticationMethod collection The email address registered to a user for authentication.
externalAuthenticationMethods externalAuthenticationMethod collection Represents the external MFA registered to a user for authentication using an external identity provider.
fido2Methods fido2AuthenticationMethod collection Represents the FIDO2 security keys registered to a user for authentication.
methods authenticationMethod collection Represents all authentication methods registered to a user.
microsoftAuthenticatorMethods microsoftAuthenticatorAuthenticationMethod collection The details of the Microsoft Authenticator app registered to a user for authentication.
operations longRunningOperation collection Represents the status of a long-running operation, such as a password reset operation.
passwordMethods passwordAuthenticationMethod collection Represents the password registered to a user for authentication. For security, the password itself is never returned in the object, but action can be taken to reset a password.
platformCredentialMethods platformCredentialAuthenticationMethod collection Represents a platform credential instance registered to a user on Mac OS.
phoneMethods phoneAuthenticationMethod collection The phone numbers registered to a user for authentication.
softwareOathMethods softwareOathAuthenticationMethod collection The software OATH time-based one-time password (TOTP) applications registered to a user for authentication.
temporaryAccessPassMethods temporaryAccessPassAuthenticationMethod collection Represents a Temporary Access Pass registered to a user for authentication through time-limited passcodes.
windowsHelloForBusinessMethods windowsHelloForBusinessAuthenticationMethod collection Represents the Windows Hello for Business authentication method registered to a user for authentication.
hardwareOathMethods hardwareOathAuthenticationMethod collection The hardware OATH time-based one-time password (TOTP) devices assigned to a user for authentication.
passwordlessMicrosoftAuthenticatorMethods passwordlessMicrosoftAuthenticatorAuthenticationMethod collection Represents the Microsoft Authenticator Passwordless Phone Sign-in methods registered to a user for authentication.

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /me/authentication/phoneMethods
GET /me/authentication/phoneMethods/{phoneMethodId}
GET /users/{id | userPrincipalName}/authentication/phoneMethods
GET /users/{userId | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
POST /me/authentication/phoneMethods/{id}/enableSmsSignIn
POST /me/authentication/phoneMethods/{mobilePhoneMethodId}/disableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/phoneMethods
POST /users/{id | userPrincipalName}/authentication/phoneMethods/{id}/enableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/phoneMethods/{mobilePhoneMethodId}/disableSmsSignIn
PATCH /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
DELETE /me/authentication/phoneMethods/{phoneMethodId}
DELETE /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /me/authentication/phoneMethods
GET /me/authentication/phoneMethods/{phoneMethodId}
GET /users/{id | userPrincipalName}/authentication/phoneMethods
GET /users/{userId | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
POST /me/authentication/phoneMethods/{id}/enableSmsSignIn
POST /me/authentication/phoneMethods/{mobilePhoneMethodId}/disableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/phoneMethods
POST /users/{id | userPrincipalName}/authentication/phoneMethods/{id}/enableSmsSignIn
POST /users/{id | userPrincipalName}/authentication/phoneMethods/{mobilePhoneMethodId}/disableSmsSignIn
PATCH /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
DELETE /me/authentication/phoneMethods/{phoneMethodId}
DELETE /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgUserAuthenticationPhoneMethod /me/authentication/phoneMethods
List phoneMethods
Get-MgUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Get phoneAuthenticationMethod
New-MgUserAuthenticationPhoneMethod /users/{id | userPrincipalName}/authentication/phoneMethods
Create phoneMethod
Remove-MgUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Delete phoneAuthenticationMethod
Update-MgUserAuthenticationPhoneMethod /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
Update phoneAuthenticationMethod
Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
Get-MgBetaUserAuthenticationPhoneMethod /me/authentication/phoneMethods
List phoneMethods
Get-MgBetaUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Get phoneAuthenticationMethod
New-MgBetaUserAuthenticationPhoneMethod /users/{id | userPrincipalName}/authentication/phoneMethods
Create phoneAuthenticationMethod
Remove-MgBetaUserAuthenticationPhoneMethod /me/authentication/phoneMethods/{phoneMethodId}
Delete phoneAuthenticationMethod
Update-MgBetaUserAuthenticationPhoneMethod /users/{id | userPrincipalName}/authentication/phoneMethods/{phoneMethodId}
Update phoneAuthenticationMethod

Code Examples

C# / .NET SDK
Create phoneMethod
View official example on Microsoft Learn
// Code snippets are only available for the latest version. Current version is 5.x

// Dependencies
using Microsoft.Graph.Models;

var requestBody = new PhoneAuthenticationMethod
{
	PhoneNumber = "+1 2065555555",
	PhoneType = AuthenticationPhoneType.Mobile,
};

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Users["{user-id}"].Authentication.PhoneMethods.PostAsync(requestBody);
JavaScript
Create phoneMethod
View official example on Microsoft Learn
const options = {
	authProvider,
};

const client = Client.init(options);

const phoneAuthenticationMethod = {
  phoneNumber: '+1 2065555555',
  phoneType: 'mobile'
};

await client.api('/users/[email protected]/authentication/phoneMethods')
	.post(phoneAuthenticationMethod);
PowerShell
Create phoneMethod
View official example on Microsoft Learn
Import-Module Microsoft.Graph.Identity.SignIns

$params = @{
	phoneNumber = "+1 2065555555"
	phoneType = "mobile"
}

New-MgUserAuthenticationPhoneMethod -UserId $userId -BodyParameter $params
Python
Create phoneMethod
View official example on Microsoft Learn
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
from msgraph.generated.models.phone_authentication_method import PhoneAuthenticationMethod
from msgraph.generated.models.authentication_phone_type import AuthenticationPhoneType
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = PhoneAuthenticationMethod(
	phone_number = "+1 2065555555",
	phone_type = AuthenticationPhoneType.Mobile,
)

result = await graph_client.users.by_user_id('user-id').authentication.phone_methods.post(request_body)

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Delegated permissions and search for UserAuthMethod-Phone.ReadWrite

4

Grant Admin Consent

Users can consent to this permission during sign-in.