Microsoft Office · OAuth Scopes

Microsoft Office OAuth Scopes

OAuth 2.0 searched

Microsoft Office publishes 16 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Microsoft Office API on a user’s behalf.

Tokens are issued from https://login.microsoftonline.com/common/oauth2/v2.0/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

CollaborationDocumentsMicrosoftOfficeProductivity
Scopes: 16 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://login.microsoftonline.com/common/oauth2/v2.0/authorize
Token URL
https://login.microsoftonline.com/common/oauth2/v2.0/token
Flows
authorizationCode

Scopes (16)

ScopeDescriptionFlows
ChannelMessage.Send Send channel messages authorizationCode
Files.Read Read user files authorizationCode
Files.ReadWrite Read and write user files authorizationCode
Mail.Read Read user mail authorizationCode
Mail.Send Send mail as user authorizationCode
Team.ReadBasic.All Read basic team info authorizationCode
User.Read Sign in and read user profile authorizationCode
Mail.ReadWrite Read and write access to user mail authorizationCode
Calendars.ReadWrite Read and write user calendars authorizationCode
Contacts.Read Read user contacts authorizationCode
Files.ReadWrite.All Read and write all files the user can access authorizationCode
Sites.Read.All Read items in all SharePoint site collections authorizationCode
Chat.Read Read the user's Teams chat messages authorizationCode
ChannelMessage.Read.All Read user's Teams channel messages authorizationCode
offline_access Maintain access to data via refresh tokens authorizationCode
openid Sign the user in with OpenID Connect authorizationCode

📄 Provider scope reference: https://learn.microsoft.com/en-us/graph/permissions-reference

Source

OAuth Scopes

Raw ↑ 
generated: '2026-06-20'
method: searched
source: openapi/microsoft-office-openapi.yml
docs: https://learn.microsoft.com/en-us/graph/permissions-reference
note: >-
  The 7 scopes below the OpenAPI subset are supplemented by additional commonly
  used delegated Microsoft Graph permissions relevant to the Office 365 surface,
  taken from the Graph permissions reference. Microsoft Graph documents hundreds
  of delegated and application permissions; see docs for the full registry.
schemes:
- name: oauth2
  source: openapi/microsoft-office-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://login.microsoftonline.com/common/oauth2/v2.0/authorize
    tokenUrl: https://login.microsoftonline.com/common/oauth2/v2.0/token
  description: Microsoft Entra ID (Azure AD) OAuth 2.0. Use the authorization code, client credentials,
    or device code flow depending on the scenario.
scopes:
- scope: ChannelMessage.Send
  description: Send channel messages
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: Files.Read
  description: Read user files
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: Files.ReadWrite
  description: Read and write user files
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: Mail.Read
  description: Read user mail
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: Mail.Send
  description: Send mail as user
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: Team.ReadBasic.All
  description: Read basic team info
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: User.Read
  description: Sign in and read user profile
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: Mail.ReadWrite
  description: Read and write access to user mail
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: Calendars.ReadWrite
  description: Read and write user calendars
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: Contacts.Read
  description: Read user contacts
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: Files.ReadWrite.All
  description: Read and write all files the user can access
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: Sites.Read.All
  description: Read items in all SharePoint site collections
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: Chat.Read
  description: Read the user's Teams chat messages
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: ChannelMessage.Read.All
  description: Read user's Teams channel messages
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: offline_access
  description: Maintain access to data via refresh tokens
  flows:
  - authorizationCode
  sources:
  - https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration
- scope: openid
  description: Sign the user in with OpenID Connect
  flows:
  - authorizationCode
  sources:
  - https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration