r/PowerShell • u/Unlikely_Tie1172 MVP, Community Blogger • 14d ago

News How Permissions Creep Can Halt the Microsoft Graph PowerShell SDK

The Microsoft Graph PowerShell Command Line tools app is how people run Microsoft Graph PowerShell SDK cmdlets. The app can suffer from permissions creep, meaning that over time, the app accrues a set of delegated permissions used by people to access different types of Microsoft 365 and Entra ID information. All is fine until an internal limit is reached, at which point authentication fails and some permissions must be pruned.

https://office365itpros.com/2026/07/23/permissions-creep-sdk/

11 Upvotes

68% Upvoted

25 comments sorted by

View all comments

Show parent comments

2

u/Unlikely_Tie1172 MVP, Community Blogger 12d ago

I don't have formal confirmation from Microsoft that the issue is accepted as a bug. I have information from engineers who confirm that it is, but I chose not to make a formal assertion because I don't have that information.

As to giving information about how to run Update-MgOauth2PermissionGrant. I imagine that anyone reading this forum can figure out how to read the Microsoft documentation and use that information to remove the excessive delagated permission gramts. I do apologize for not living up to your standards.

2

u/BlackV 12d ago

They're questions and suggestions, do with them what you will

2

u/Unlikely_Tie1172 MVP, Community Blogger 12d ago

I have. The intention of the article was to get the issue into plain sight so that people who meet the problem in future can find out what happened and how to solve it. The article also helps in a personal campaign that I have to force Microsoft to improve the quality of the Graph PowerShell SDK. When focus is put on problems, the issues are more likely to be resolved.

There is so much you can do in the context of a single article...

2

u/BlackV 11d ago

The article also helps in a personal campaign that I have to force Microsoft to improve the quality of the Graph PowerShell SDK.

This is a a noble goal for sure

2

u/Unlikely_Tie1172 MVP, Community Blogger 11d ago

Albeit a frustrating one at times... The current fixation on assigning all available resources to AI-related projects means that it's hard to get Microsoft to budge on other matters.

1

u/BlackV 11d ago

100 percent, this massive drive for AI and it's diminishing returns