AvePoint Knowledge Center
Request article
Contact support
Request article
Contact support
English

    Home > Manage App Profiles > API Permissions Required by AvePoint Apps > Apps for Individual Services > EnPower > EnPower for Microsoft 365

    Export to PDF

    EnPower for Microsoft 365

    When you create the EnPower for Microsoft 365 app profile in AvePoint Online Services, the AvePoint EnPower for Microsoft365 app will be automatically set up in your Microsoft Entra ID.

    The table below lists the permissions that should be accepted when you authorize the AvePoint EnPower for Microsoft365 app.

    APIPermissionTypePurpose
    Microsoft GraphAdministrativeUnit.ReadWrite.All(Read and write all administrative units.)ApplicationRetrieve administrative units’ information and assign users or Groups to administrative units.
    Microsoft GraphAuditLog.Read.All(Read all audit log data)ApplicationRetrieve users’ audit logs for reports and management.
    Microsoft GraphCallRecords.Read.All(Read all call records)ApplicationRetrieve call records for Teams activity reports and PSTN and SMS reports.
    Microsoft GraphChannel.Create(Create channels)ApplicationCreate channels in your Teams.
    Microsoft GraphChannel.Delete.All(Delete channels)ApplicationDelete channels in your Teams.
    Microsoft GraphChannel.ReadBasic.All(Read the names and descriptions of all channels)ApplicationRetrieve the basic information of channels in your Teams.
    Microsoft GraphChannelSettings.ReadWrite.All(Read and write the names, descriptions, and settings of all channels)ApplicationRetrieve and update channel settings.
    Microsoft GraphGroup.Create(Create Groups)ApplicationCreate Groups for your Microsoft users.
    Microsoft GraphGroup.ReadWrite.All(Read and write all groups)ApplicationRetrieve and update Groups’ information.
    Microsoft GraphGroupMember.ReadWrite.All(Read and write all group memberships)ApplicationRetrieve and update memberships for your Groups.
    Microsoft GraphMail.Send(Send mail as any user)ApplicationSending passwords via emails to users created in EnPower.
    Microsoft GraphReports.Read.All(Read all usage reports)ApplicationRetrieve data for usage reports.
    Microsoft GraphRoleManagement.ReadWrite.Directory(Read and write all directory RBAC settings)ApplicationManage permissions for the permission groups created in EnPower.
    Microsoft GraphSites.ReadWrite.All(Read and write items in all site collections)ApplicationRetrieve OneDrive users and OneDrive information.
    Microsoft GraphTeam.Create(Create Teams)ApplicationCreate Teams in your organization.
    Microsoft GraphTeam.ReadBasic.All(Get a list of all Teams)ApplicationRetrieve Teams data for Teams report.
    Microsoft GraphTeamMember.ReadWrite.All(Add and remove members from all Teams)ApplicationRetrieve and manage members in your Teams.
    Microsoft GraphTeamSettings.ReadWrite.All(Read and change all Teams' settings)ApplicationRetrieve and manage settings for your Teams.
    Microsoft GraphTeamwork.Migrate.All(Create chat and channel messages with anyone's identity and with any timestamp)ApplicationCreate Teams and channels.
    Microsoft GraphUser.Invite.All(Invite guest users to the organization)ApplicationInvite or bulk invite guest users to your organization.
    Microsoft GraphUser.ReadWrite.All(Read and write all users' full profiles)ApplicationRetrieve and manage user properties.
    Microsoft GraphOrganization.Read.All(Read organization information)ApplicationRetrieve your organization's information.
    Microsoft GraphInformationProtectionPolicy.Read.All(Read all published labels and label policies for an organization)ApplicationRetrieve your organization’s sensitivity labels for site creation.
    Microsoft GraphReportSettings.Read.All(Read all admin report settings)ApplicationRetrieve your organization’s report settings on whether the user, group, and site names have been concealed in your reports.
    Microsoft GraphDirectory.ReadWrite.All(Read and write directory data)ApplicationRetrieve and manage your organization’s Microsoft Entra data.
    Microsoft GraphUser.DeleteRestore.All(Delete and restore all users)ApplicationRetrieve and restore deleted users.
    Microsoft GraphUserAuthenticationMethod.ReadWrite.All(Read and write all users' authentication methods)ApplicationRetrieve and update users’ authentication methods for users’ MFA management.
    Microsoft GraphPolicy.ReadWrite.AuthenticationMethod(Read and write all authentication method policies)ApplicationRetrieve and update users’ authentication method policies for users’ MFA management.
    Microsoft GraphDirectory.AccessAsUser.All(Access directory as the signed-in user)DelegatedRetrieve and manage users’ Microsoft Entra data.
    Microsoft GraphUser.Read.All(Read all users’ full profiles)DelegatedRetrieve and manage Teams policies in your tenants.
    Microsoft GraphGroup.ReadWrite.All(Read and write all groups)DelegatedRetrieve and manage Groups’ sensitivity and related Teams’ archiving status in your tenant.
    SharePoint/Office 365 SharePoint OnlineUser.ReadWrite.All(Read and write user profiles)ApplicationRetrieve data for EnPower Auto Discovery.
    SharePoint/Office 365 SharePoint OnlineSites.FullControl.All(Have full control of all site collections)ApplicationRetrieve data for EnPower Auto Discovery.
    Exchange OnlineExchange.ManageAsApp(Manage Exchange as application)ApplicationRetrieve mailboxes’ data for EnPower Auto Discovery.
    Azure Rights Management ServicesContent.DelegatedReader(Read protected content on behalf of a user)ApplicationRetrieve sensitivity labels in your organization and apply sensitivity labels to files with Workflows.
    Azure Rights Management ServicesContent.DelegatedWriter(Create protected content on behalf of a user)ApplicationRetrieve sensitivity labels in your organization and apply sensitivity labels to files with Workflows.
    Azure Rights Management ServicesContent.SuperUser(Read all protected content for this tenant)ApplicationRetrieve sensitivity labels in your organization and apply sensitivity labels to files with Workflows.
    Azure Rights Management ServicesContent.Writer(Create protected content)ApplicationRetrieve sensitivity labels in your organization and apply sensitivity labels to files with Workflows.
    Microsoft Information Protection Sync ServicesUnifiedPolicy.Tenant.Read(Read all unified policies of the tenant)ApplicationRetrieve sensitivity labels in your organization and apply sensitivity labels to files with Workflows.
    Skype and Teams Tenant Admin APIuser_impersonation(Access Microsoft Teams and Skype for Business data as the signed in user)DelegatedConnect to Microsoft Teams.