January 13, 2026
Adding items to Launch Pad Widget
Learn how to add items via My Apps Content App
Here are the Graph Permissions required to use Graph Search.
Please note these permissions are all delgated
Note - For delegated permissions, the effective permissions of your app will be the least privileged intersection of the delegated permissions the app has been granted (through consent) and the privileges of the currently signed-in user. Your app can never have more privileges than the signed-in user. Within organizations, the privileges of the signed-in user may be determined by policy or by membership in one or more administrator roles. For example, assume your app has been granted the User.ReadWrite.All delegated permission in Microsoft Graph. This permission nominally grants your app permission to read and update the profile of every user in an organization. If the signed-in user is a global administrator, your app will be able to update the profile of every user in the organization. However, if the signed-in user is not in an administrator role, your app will be able to update only the profile of the signed-in user. It will not be able to update the profiles of other users in the organization because the user that it has permission to act on behalf of does not have those privileges.
|
Graph Permission |
Akumina Usage |
Additional Details |
||||||||||
| Sites.Read.All | Ability to view sites data in graph search | Read items in all site collections | ||||||||||
|
|
Ability to view acronyms configured in M365 on search results page |
Read all acronyms that the user can access |
||||||||||
|
ExternalConnection.Read.All |
Ability to configure external connections in Voice search management screens. |
Allows the app to read all external connections on behalf of a signed-in user. The signed-in user must be an administrator. |
||||||||||
|
SearchConfiguration.ReadWrite.All |
Ability for admins to configure acronyms/promoted results in voice search management. |
Read and write your organization's search configuration
|
||||||||||
|
Bookmark.Read.All |
Ability to view promoted results configured in M365 on search results page |
Read all bookmarks that the user can access |
||||||||||
|
|
Ability to view external items configured like servicenow etc in search results |
Read items in external datasets |
||||||||||
|
|
Ability to view outlook emails in search results |
Read user mail |
||||||||||
|
|
Ability to view teams chat messages in search results |
Read user chat messages |
||||||||||
|
|
Ability to view teams chat messages in search results |
Read user channel messages |
Please note Akumina requires other Graph permissions in general for the system's performance. They can be found here