| title | enumeratedScopes resource type |
|---|---|
| description | Inheritance pattern specifying an explicit allow-list of delegated permission scopes for a resource application that agent identities of an agent identity blueprint may acquire automatically without enabling consent for each agent identity. |
| author | zallison22 |
| ms.date | 11/13/2025 |
| ms.localizationpriority | medium |
| ms.subservice | entra-applications |
| doc_type | resourcePageType |
Namespace: microsoft.graph
[!INCLUDE beta-disclaimer]
Defines that an explicit list of scopes of a resource application defined on the agentIdentityBlueprint are inheritable by agent identities through the inheritablePermissions object. This constrained inheritance configuration for delegated permission scopes provides fine‑grained control and supports gradual permission expansion without broad elevation.
Inherits from inheritableScopes.
| Property | Type | Description |
|---|---|---|
| kind | scopeCollectionKind | Always enumerated for this derived type. Inherited from inheritableScopes. |
| scopes | String collection | Required. Nonempty list of delegated permission scope identifiers published by the resource application to inherit. Entries must be unique and must not include any globally blocked scopes. |
None.
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.enumeratedScopes",
"kind": "String",
"scopes": [
"String"
]
}