Graph Permission Finder
Describe what you want to do — get the least-privileged Microsoft Graph permission for it, with the PowerShell to go with it.
✓ runs 100% in your browser — no data leaves this pageFrequently asked
Why least privilege?
Overscoped Graph consent is one of the most common tenant risks — Directory.ReadWrite.All where Group.Read.All would do. This finder always suggests the smallest workable permission.
Is this list complete?
No — it covers the ~35 most common admin tasks. For everything, use Microsoft's Graph permissions reference (linked in the results).