Check if an application permission (app role) is granted to your app.

Permissions

Requires delegated permission AppRoleAssignment.ReadWrite.All.

Reference

• https://learn.microsoft.com/en-us/graph/permissions-grant-via-msgraph

View source

from office365.graph_client import GraphClient
from tests import test_admin_principal_name, test_client_id, test_tenant

privileged_client = (
    GraphClient(tenant=test_tenant)
    .with_token_interactive(test_client_id, test_admin_principal_name)
    .require_role("Global Administrator", "Privileged Role Administrator")
)

scope = input("Application permission (app role): ")


if privileged_client.has_application_permissions(scope, test_client_id):
    print(f"✅ Permission '{scope}' is granted.")
else:
    print(f"❌ Permission '{scope}' is not granted.")

---

← Back to Application Registration & Permissions