Application ConsentThe read-only app reads your security settings so your provider can assess them; it cannot change anything. The full-scope app applies the security settings you agree, approved during a change window with your own change reference, and stays in place until you or your provider remove it. Neither app is ever given Global Administrator. You can turn either off here at any time.