Microsoft Office OAuth Scopes

generated: '2026-06-20'
method: searched
source: openapi/microsoft-office-openapi.yml
docs: https://learn.microsoft.com/en-us/graph/permissions-reference
note: >-
  The 7 scopes below the OpenAPI subset are supplemented by additional commonly
  used delegated Microsoft Graph permissions relevant to the Office 365 surface,
  taken from the Graph permissions reference. Microsoft Graph documents hundreds
  of delegated and application permissions; see docs for the full registry.
schemes:
- name: oauth2
  source: openapi/microsoft-office-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://login.microsoftonline.com/common/oauth2/v2.0/authorize
    tokenUrl: https://login.microsoftonline.com/common/oauth2/v2.0/token
  description: Microsoft Entra ID (Azure AD) OAuth 2.0. Use the authorization code, client credentials,
    or device code flow depending on the scenario.
scopes:
- scope: ChannelMessage.Send
  description: Send channel messages
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: Files.Read
  description: Read user files
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: Files.ReadWrite
  description: Read and write user files
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: Mail.Read
  description: Read user mail
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: Mail.Send
  description: Send mail as user
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: Team.ReadBasic.All
  description: Read basic team info
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: User.Read
  description: Sign in and read user profile
  flows:
  - authorizationCode
  sources:
  - openapi/microsoft-office-openapi.yml
- scope: Mail.ReadWrite
  description: Read and write access to user mail
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: Calendars.ReadWrite
  description: Read and write user calendars
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: Contacts.Read
  description: Read user contacts
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: Files.ReadWrite.All
  description: Read and write all files the user can access
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: Sites.Read.All
  description: Read items in all SharePoint site collections
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: Chat.Read
  description: Read the user's Teams chat messages
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: ChannelMessage.Read.All
  description: Read user's Teams channel messages
  flows:
  - authorizationCode
  sources:
  - https://learn.microsoft.com/en-us/graph/permissions-reference
- scope: offline_access
  description: Maintain access to data via refresh tokens
  flows:
  - authorizationCode
  sources:
  - https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration
- scope: openid
  description: Sign the user in with OpenID Connect
  flows:
  - authorizationCode
  sources:
  - https://login.microsoftonline.com/common/v2.0/.well-known/openid-configuration