Lets an app read the profile of whoever is signed in. This low-impact delegated Graph permission is included automatically in new app registrations, and microsoft-user-default-low typically allows users to consent to it.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains User.Read in context, with comparison tables and the common traps.
Terms in this definition
- App protection policy
A set of Intune rules on managed apps that safeguards organisational data, for example by demanding a PIN or preventing copy-paste and save-as into personal apps. It works whether or not the device is enrolled.
- CRUD
Shorthand for create, read, update and delete, the four basic things you do with data. Data-plane roles in Azure Cosmos DB, for instance, authorise those operations on items.
- microsoft-user-default-low
App consent policy built into Entra that lets users consent only to low-impact permissions, and only for apps registered in the tenant or from verified publishers.