1

I've been playing around with Microsoft Graph in order to be able to send an email from within the Graph Explorer.

This was not possible, because my admin user with which I was logged in did not have Mail.Send permissions, so I clicked "Consent". The tests failed, so I wanted to revoke the Mail.Send permission, which I could only do by consenting to the DelegatedPermissionGrant.ReadWrite.All and Directory.ReadWrite.All permissions. Which I did.

After I revoked my Mail.Send permission, I wanted to revoke the other two, but as soon as I revoked one, I could no longer revoke the other - A needs B to be able to revoke A, and vice versa...

How can I revoke both these permissions from my admin account, and restore the original situation?

Joe
  • 163
  • 1
  • 5
  • 21

1 Answers1

0

Thanks to a link to the article Removing Permissions from the Graph Explorer mentioned by harrymc I was able to unconsent to both permissions.

From the article: "One quick way to clear all the permissions is to close the Graph Explorer window and then delete the Graph Explorer app. Wait a few minutes afterwards and then launch the Graph Explorer and sign-in again. The Explorer detects that its app isn’t available in the tenant and will recreate it with no consented permissions. The same technique works for the Microsoft Graph PowerShell SDK app."

I deleted the app as stated above, and I can confirm that, after logging in again a few moments later, both permissions were revoked.

Joe
  • 163
  • 1
  • 5
  • 21