AvePoint Knowledge Center
Request article
Contact support
Request article
Contact support
English

    Home > Manage App Profiles > API Permissions Required by AvePoint Apps > Apps for Individual Services > tyGraph > tyGraph Suite

    Export to PDF

    tyGraph Suite

    When you create the tyGraph Suite app profile in AvePoint Online Services, the AvePoint tyGraph app will be automatically set up in your Microsoft Entra ID.

    *Note: The tyGraph Suite option includes all modules in tyGraph.

    The tyGraph data initialization will start after you sign into tyGraph interface once the app profile is set up. To ensure smooth data collection and reporting, confirm that the required roles and settings are properly configured.

    - For Viva Engage reports, the account used for app consent must hold the Viva Engage Verified Administrator role. Confirm this role assignment in the Viva Engage admin center or Microsoft Entra ID. - Auditing in your tenant is enabled. Turn on auditing in the Microsoft 365 Security & Compliance Center. - Usage reports are not anonymized. Go to the **Microsoft 365 admin** **center** > **Settings** > **Org settings** > **Services** > **Reports** and ensure the **Display concealed user, group, and site names in all reports** option is deselected. - To enable the data collection on SharePoint pages, you must install the Page Engine app in your SharePoint environment.

    *Note: The tyGraph interface offers a Scan status tab on Home page tracking the data collection status and a Quick check page through Settings > Scan to verify the prerequisites condition. For more details, refer to in .

    The table below lists the permissions that should be accepted when you authorize the AvePoint tyGraph app.

    APIPermissionTypePurposeLast update
    Microsoft GraphCallRecords.Read.All (Read all call records)ApplicationRead call records for all calls and online meetings.
    Microsoft GraphChannel.ReadBasic.All(Read the names and descriptions of all channels)ApplicationRead channel names and descriptions of Teams reporting.
    Microsoft GraphChannelMember.Read.All(Read the members of all channels)ApplicationRead all channel messages of the Teams reporting.
    Microsoft GraphChannelMessage.Read.All(Read all channel messages)ApplicationRead all channel messages of the Teams reporting.
    Microsoft GraphDirectory.Read.All(Read directory data)ApplicationRetrieve information from your organization’s Active Directory.
    Microsoft GraphFiles.Read.All(Read files in all site collections)ApplicationRead files in all site collections of the SharePoint reporting.
    Microsoft GraphGroup.Read.All(Read all groups)ApplicationInventory the groups for reporting purposes.
    Microsoft GraphGroupMember.Read.All(Read all group memberships)ApplicationRead group memberships of Pulse and Teams reporting.
    Microsoft GraphInformationProtectionPolicy.Read.All(Read all published labels and label policies for an organization.)ApplicationRetrieve tenant sensitive labels that will be displayed in the Copilot report.June 2024
    Microsoft GraphReports.Read.All(Read all usage reports)ApplicationRead usage report data of all reporting.
    Microsoft GraphSites.Read.All(Read items in all site collections)ApplicationRead items in all site collections of the SharePoint reporting.
    Microsoft GraphUser.Read(Sign in and read user profile)DelegatedRetrieve your Microsoft 365 tenant information.
    Microsoft GraphTeam.ReadBasic.All(Get a list of all teams)ApplicationRead Teams basic information of Teams reporting.
    Microsoft GraphTeamsTab.Read.All(Read tabs in Microsoft Teams)ApplicationRead Teams tabs of Teams reporting.
    Microsoft GraphUser.Read.All(Read all users' full profiles)ApplicationRead user properties.
    Microsoft GraphAiEnterpriseInteraction.Read.All(Read all AI enterprise interactions)ApplicationRetrieve Microsoft 365 Copilot interaction data.April 2025
    Office 365 Management APIsActivityFeed.Read(Read activity data for your organization)ApplicationAn aggregation of actions and events for specified content types such as Microsoft Entra, SharePoint, OneDrive, Teams, or Viva Engage.
    SharePoint/Office 365 SharePoint OnlineSites.Read.All(Read items in all site collections)ApplicationRead items in all site collections of the SharePoint reporting.
    SharePoint/Office 365 SharePoint OnlineSites.FullControl.All(Have full control of all site collections)ApplicationUsed in Sites that I own report to retrieve site owners and users with full control of sites.*Note: It can be removed in a custom app registration, but the Sites that I own report will not function.
    Yammeraccess_as_user(Read and write to the Yammer platform [preview])DelegatedTo access the Viva Engage platform on behalf of the signed-in user.
    Yammeruser_impersonation(Read and write to the Yammer platform [preview])DelegatedTo access the Viva Engage platform on behalf of the signed-in user.