Microsoft Graph

Also known as: Graph API, Microsoft Graph API

Microsoft Graph is the Microsoft API that gives access to the data of the Microsoft 365 services. Rencore Governance reads most of your tenant through it, with the permissions you consent to.

Microsoft limits how many requests an application may send, so Rencore Governance keeps a steady, low request load and pauses scanning when Microsoft throttles it, without losing data.

The permissions reference lists the Graph permissions each connector uses and what they let Rencore Governance read. Microsoft documents every Graph permission in its own permissions reference.

For example, Entra ID policies flag enterprise applications in your tenant that use Microsoft Graph, SharePoint Online or Exchange Web Services permissions, so you can see which apps reach your data.

When Microsoft changes a Graph endpoint, Rencore Governance can need new permissions. That is when you are asked to reconsent, as for sensitivity label scanning.