Skip to main content
Review the minimum standard delegated scope mapping for every Microsoft Entra action. The mapping covers directory users, groups, group members, and manager lookup. Sites.Selected does not apply.

Minimal scopes per action

Each Microsoft Entra connection also requests openid, offline_access, and User.Read. These connection scopes apply in addition to the action scopes in the table.
ActionDescriptionMinimum scopes
Get managerGets the direct manager of a user.User.Read.All
Resolve groupResolves a group in the directory.GroupMember.Read.All
Search group membersLists user members of a group, including profile fields and optional manager.GroupMember.Read.All
User.Read.All
Search groupsSearches groups in the directory.GroupMember.Read.All
Search usersSearches users in the directory.User.Read.All