Group settings API should require Group.ReadWrite.All permission

Group settings API should require Group.ReadWrite.All permission
4

Upvotes

Upvote

 Sep 10 2021
0 Comments 
New

The Group settings API requires the Directory.ReadWrite.All permission even for its GET operation. It would be great if the API can support Group.ReadWrite.All to prevent over-privileged apps.

 

Customer feedback: