Microsoft 365 – Graph APIs – Managing guest permissions level in our Tenant using Microsoft Graph

Hi All,

Greetings for the day!!!

On Microsoft 365 Junction, we will continue to explore Microsoft Graph APIs.

In this article I am discussing Microsoft Graph APIs for configuring/managing guest permissions in our tenant.

• Microsoft Entra ID allows us to restrict what external guest users can see
• Guest users are set to a limited permission level by default

Permissions levels for Guest users

• Same as member users
• Limited access (default)
• Restricted access

Permission level	Access level	Value (Role ID)
Same as member users	Guests have the same access to Microsoft Entra resources as member users	a0b1b346-4d3e-4e8b-98f8-753987be4970
Limited access (default)	Guests can see membership of all non-hidden groups	10dae51f-b6af-4016-8d66-8c2a99b929b3
Restricted access (new)	Guests can’t see membership of any groups	2af84b1e-32c8-42b7-82bc-daa82404023b

• We can manage (update) these permissions level either through Entra admin center or through Microsoft Graph.

• In this article we will explore Graph APIs available for guest permission level.

Permissions required for managing GUEST permission level

Managing GUEST permission level with Graph API

• Here, for demo purpose I will use Graph Explorer.

Scenario 1 – How to know the current permission level for guest users

• We have Graph API

GET https://graph.microsoft.com/beta/policies/authorizationPolicy/authorizationPolicy

Scenario 2 – Updating existing permission level – PATCH request

• We will use PATCH request to update guest users permission level
• In “Request body” we will update value of “guestUserRoleId”
• Refer above table “Permission level for Guest users” to know specific role id for given permission level

https://graph.microsoft.com/beta/policies/authorizationPolicy/authorizationPolicy

Thanks for reading the article !!! Please feel free to discuss in case any issues / suggestions / thoughts / questions !!!

HAVE A GREAT TIME AHEAD !!! LIFE IS BEAUTIFUL 🙂