A rill-garden sensor portal only displays the signed-in ranger’s own profile, but a teammate requested User.Read.All. Which Graph permission should the developer keep?
Select an answer to reveal the explanation.
Short Explanation
Just showing “me” to the signed-in ranger? Stick with delegated User.Read. User.Read.All is a much bigger key than this portal needs.
Full Explanation
Least privilege for a signed-in user’s own profile is the delegated User.Read permission. User.Read.All grants broader directory read access and often triggers admin consent requirements that are unnecessary for a “just me” portal. Matching Graph permissions to the actual data need reduces consent friction and exposure.