This is an automated archive made by the Lemmit Bot.

The original was posted on /r/azure by /u/Prestigious_Sea_9845 on 2023-09-23 12:37:50.

I started learning about Azure AD and just created my first App Registration. All of a sudden it says there is a configured permission on Graph API to “Sign in and read user profile”.

I tried researching Graph API, the first thing it says is:

Microsoft Graph is a RESTful web API that enables you to access Microsoft Cloud service resources. After you register your app and get authentication tokens for a user or service, you can make requests to the Microsoft Graph API.

Ok. Still doesn’t answer my question: why do I need Graph API to sign in and read user profile? I thought Azure AD is here for that kind of stuff.

Is Graph API some sort of a API gateway in front of other Azure APIs? I just have a hard time understand what it does and why it’s important.

Thanks!