WindowsUpdates.Read.All | Graph Permissions

Permission Details

Application Permission

Read all Windows update deployment settings

Allows the app to read all Windows update deployment settings for the organization without a signed-in user.

Permission ID: 50a8bf5f-b06a-4ac7-881f-3ca0c4be7550

Delegated Permission

Read all Windows update deployment settings

Allows the app to read all Windows update deployment settings for the organization on behalf of the signed-in user.

Permission ID: e09fef2d-bf5e-4439-affa-7c48d23bb1c2

Properties

Microsoft Graph v1.0 endpoint-derived-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property	Type	Description
`edge`	`object`	A container for Microsoft Edge resources. Read-only.
`exchange`	`object`	A container for the Exchange admin functionality. Read-only.
`microsoft365Apps`	`object`	A container for the Microsoft 365 apps admin functionality.
`people`	`object`	Represents a setting to control people-related admin settings in the tenant.
`reportSettings`	`object`	A container for administrative resources to manage reports.
`serviceAnnouncement`	`object`	A container for service communications resources. Read-only.
`sharepoint`	`object`
`teams`	`object`	A container for Teams administration functionalities, such as Teams telephone number management functionalities, user Teams configurations, and policy assignments.

JSON Representation

Microsoft Graph v1.0 endpoint-derived-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation

{
  "@odata.type": "#microsoft.graph.admin"
}

Relationships

Microsoft Graph v1.0 endpoint-derived-docs

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship	Type	Description
`configurationManagement`	`configurationManagement`	A container for Tenant Configuration Management (TCM) resources. Read-only.
`edge`	`edge`	A container for Microsoft Edge resources. Read-only.
`exchange`	`exchangeAdmin`	A container for the Exchange admin functionality. Read-only.
`microsoft365Apps`	`adminMicrosoft365Apps`	A container for the Microsoft 365 apps admin functionality.
`people`	`peopleAdminSettings`	Represents a setting to control people-related admin settings in the tenant.
`reportSettings`	`adminReportSettings`	A container for administrative resources to manage reports.
`serviceAnnouncement`	`serviceAnnouncement`	A container for service communications resources. Read-only.
`sharepointSettings`	`sharepointSettings`	A container for administrative resources to manage tenant-level settings for SharePoint and OneDrive.
`teams`	`teamsAdministration.teamsAdminRoot`	A container for Teams administration functionalities, such as Teams telephone number management functionalities, user Teams configurations, and policy assignments.

Graph Methods

Delegated access App-only access

Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

No API methods available for this version.

Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET `/admin//windows/updates/deploymentAudiences/{deploymentAudienceId}/exclusions`
GET `/admin//windows/updates/deploymentAudiences/{deploymentAudienceId}/members`
GET `/admin/windows/updates/catalog/entries`
GET `/admin/windows/updates/deploymentAudiences`
GET `/admin/windows/updates/deploymentAudiences/{deploymentAudienceId}`
GET `/admin/windows/updates/deployments`
GET `/admin/windows/updates/deployments/{deploymentId}`
GET `/admin/windows/updates/policies?$filter=isof('microsoft.graph.windowsUpdates.qualityUpdatePolicy')`
GET `/admin/windows/updates/policies/{policyId}`
GET `/admin/windows/updates/policies/{policyId}/applicableContent`
GET `/admin/windows/updates/policies/{policyId}/approvals`
GET `/admin/windows/updates/policies/{policyId}/approvals/{policyApprovalId}`
GET `/admin/windows/updates/policies/{policyId}/rings?$filter=isof('microsoft.graph.windowsUpdates.qualityUpdateRing')`
GET `/admin/windows/updates/policies/{policyId}/rings/{ringId}`
GET `/admin/windows/updates/products/FindByCatalogId(catalogID='catalogID')`
GET `/admin/windows/updates/products/FindByKbNumber(kbNumber={kbNumber})`
GET `/admin/windows/updates/resourceConnections`
GET `/admin/windows/updates/resourceConnections/{operationalInsightsConnectionId}`
GET `/admin/windows/updates/resourceConnections/{resourceConnectionId}`
GET `/admin/windows/updates/resourceConnections/microsoft.graph.windowsUpdates.operationalInsightsConnection`
GET `/admin/windows/updates/updatableAssets`
GET `/admin/windows/updates/updatableAssets/{azureADDeviceId}`
GET `/admin/windows/updates/updatableAssets/{updatableAssetGroupId}`
GET `/admin/windows/updates/updatableAssets/{updatableAssetGroupId}/microsoft.graph.windowsUpdates.updatableAssetGroup/members`
GET `/admin/windows/updates/updatableAssets/{updatableAssetId}`
GET `/admin/windows/updates/updatableAssets/microsoft.graph.windowsUpdates.azureADDevice`
GET `/admin/windows/updates/updatableAssets/microsoft.graph.windowsUpdates.updatableAssetGroup`
GET `/admin/windows/updates/updatePolicies`
GET `/admin/windows/updates/updatePolicies/{updatePolicyId}`
GET `/admin/windows/updates/updatePolicies/{updatePolicyId}/complianceChanges`
GET `/admin/windows/updates/updatePolicies/{updatePolicyId}/complianceChanges/{complianceChangeId}`
GET `/admin/windows/updates/updatePolicies/{updatePolicyId}/complianceChanges/microsoft.graph.windowsUpdates.contentApproval`

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

No deterministic PowerShell command map is available for this permission.

Browse PowerShell docs

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
`Find-MgBetaWindowsUpdatesProductByCatalogId` /admin/windows/updates/products/FindByCatalogId(catalogID='catalogID') product: findByCatalogId
`Find-MgBetaWindowsUpdatesProductByCatalogId` /admin/windows/updates/products/FindByKbNumber(kbNumber={kbNumber}) product: findByKbNumber
`Get-MgBetaWindowsUpdatesCatalogEntry` /admin/windows/updates/catalog/entries List entries
`Get-MgBetaWindowsUpdatesDeployment` /admin/windows/updates/deployments List deployments
`Get-MgBetaWindowsUpdatesDeployment` /admin/windows/updates/deployments/{deploymentId} Get deployment
`Get-MgBetaWindowsUpdatesPolicy` /admin/windows/updates/updatePolicies List updatePolicies
`Get-MgBetaWindowsUpdatesPolicy` /admin/windows/updates/updatePolicies/{updatePolicyId} Get updatePolicy
`Get-MgBetaWindowsUpdatesPolicyComplianceChange` /admin/windows/updates/updatePolicies/{updatePolicyId}/complianceChanges List complianceChanges
`Get-MgBetaWindowsUpdatesPolicyComplianceChange` /admin/windows/updates/updatePolicies/{updatePolicyId}/complianceChanges/{complianceChangeId} Get complianceChange
`Get-MgBetaWindowsUpdatesPolicyComplianceChange` /admin/windows/updates/updatePolicies/{updatePolicyId}/complianceChanges/{complianceChangeId} Get contentApproval
`Get-MgBetaWindowsUpdatesPolicyComplianceChange` /admin/windows/updates/updatePolicies/{updatePolicyId}/complianceChanges/microsoft.graph.windowsUpdates.contentApproval List contentApprovals
`Get-MgBetaWindowsUpdatesResourceConnection` /admin/windows/updates/resourceConnections List resourceConnections
`Get-MgBetaWindowsUpdatesResourceConnection` /admin/windows/updates/resourceConnections/{operationalInsightsConnectionId} Get operationalInsightsConnection
`Get-MgBetaWindowsUpdatesResourceConnection` /admin/windows/updates/resourceConnections/{resourceConnectionId} Get resourceConnection
`Get-MgBetaWindowsUpdatesResourceConnection` /admin/windows/updates/resourceConnections/microsoft.graph.windowsUpdates.operationalInsightsConnection List operationalInsightsConnections
`Get-MgBetaWindowsUpdatesUpdatableAsset` /admin/windows/updates/updatableAssets List updatableAssets
`Get-MgBetaWindowsUpdatesUpdatableAsset` /admin/windows/updates/updatableAssets/{azureADDeviceId} Get azureADDevice
`Get-MgBetaWindowsUpdatesUpdatableAsset` /admin/windows/updates/updatableAssets/{updatableAssetGroupId} Get updatableAssetGroup
`Get-MgBetaWindowsUpdatesUpdatableAsset` /admin/windows/updates/updatableAssets/{updatableAssetId} Get updatableAsset
`Get-MgBetaWindowsUpdatesUpdatableAsset` /admin/windows/updates/updatableAssets/microsoft.graph.windowsUpdates.azureADDevice List azureADDevice resources
`Get-MgBetaWindowsUpdatesUpdatableAsset` /admin/windows/updates/updatableAssets/microsoft.graph.windowsUpdates.updatableAssetGroup List updatableAssetGroup resources

Code Examples

C# / .NET SDK

Get azureADDevice

View official example on Microsoft Learn

// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Admin.Windows.Updates.UpdatableAssets["{updatableAsset-id}"].GetAsync();

JavaScript

Get azureADDevice

View official example on Microsoft Learn

const options = {
	authProvider,
};

const client = Client.init(options);

let updatableAsset = await client.api('/admin/windows/updates/updatableAssets/983f03cd-03cd-983f-cd03-3f98cd033f98')
	.version('beta')
	.get();

PowerShell

Get azureADDevice

View official example on Microsoft Learn

Import-Module Microsoft.Graph.Beta.WindowsUpdates

Get-MgBetaWindowsUpdatesUpdatableAsset -UpdatableAssetId $updatableAssetId

Python

Get azureADDevice

View official example on Microsoft Learn

# Code snippets are only available for the latest version. Current version is 1.x
from msgraph_beta import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.admin.windows.updates.updatable_assets.by_updatable_asset_id('updatableAsset-id').get()

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for WindowsUpdates.Read.All

4

Grant Admin Consent

Application permissions always require admin consent.