Microsoft Entra IDConnect with the required scope
In brief
After creating a new application proxy application, grant admin consent for the **User.Read** delegated permission in the Microsoft Entra admin center or using the Microsoft Graph PowerShell.
What Entra admins need to know
Review the documentation change to determine whether it affects tenant configuration, security posture, or rollout plans.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
Open on Microsoft Learn ↗The comparison below is an extract of the Microsoft Learn article showing only the changed content. Open the full article for complete context.
After creating a new application proxy application, grant admin consent for the User.Read delegated permission in the Microsoft Entra admin center or using the Microsoft Graph PowerShell.
Microsoft Entra admin center
- Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.
- Browse to Identity > Applications > Enterprise applications.
- Select the newly created application proxy application.
- Review the permissions and select Accept.
Microsoft Graph PowerShell
# Connect with the required scope
Connect-MgGraph -Scopes "Application.ReadWrite.All", "DelegatedPermissionGrant.ReadWrite.All"
-Scope "User.Read"
Verify the permission was granted
- In the Microsoft Entra admin center, navigate to your enterprise application.
@@ -87,6 +87,7 @@ Add on-premises applications to Microsoft Entra ID. After creating a new application proxy application, grant admin consent for the **User.Read** delegated permission in the Microsoft Entra admin center or using the Microsoft Graph PowerShell. ### [Microsoft Entra admin center](#tab/microsoft-entra-admin-center)+ 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Cloud Application Administrator](/entra/identity/role-based-access-control/permissions-reference#cloud-application-administrator). 2. Browse to **Identity** > **Applications** > **Enterprise applications**. 3. Select the newly created application proxy application.@@ -95,6 +96,7 @@ After creating a new application proxy application, grant admin consent for the 6. Review the permissions and select **Accept**. ### [Microsoft Graph PowerShell](#tab/microsoft-graph-powershell)+ ```powershell # Connect with the required scope Connect-MgGraph -Scopes "Application.ReadWrite.All", "DelegatedPermissionGrant.ReadWrite.All"@@ -117,6 +119,10 @@ New-MgOauth2PermissionGrant -ClientId $sp.Id ` -Scope "User.Read" ``` +---+++ ### Verify the permission was granted 1. In the Microsoft Entra admin center, navigate to your enterprise application.