Home > Get Started > Permissions for App Authorization > Permissions for Calling Management

    Export to PDF

    Permissions for Calling Management

    The table below lists the permissions that you need to consent when adding the EnPower for Teams Calling service app in AvePoint Online Services. Currently, custom Azure app cannot be used for calling management in EnPower.

    *Note: For Exchange-related tasks, including recipient management and protection features, you need to go to the Microsoft Entra admin center (or Azure portal) to assign the Exchange Administrator role to the EnPower for Teams calling app. For detailed steps, refer to Assign Administrator Roles to the App section in Create App Profile.

    EnPower featurePermissionAPIType
    View user detailsUser.Read.All(Read all users’ full profiles)Microsoft GraphDelegated
    View user detailsAppCatalog.ReadWrite.All(Read and write to all app catalogs)Microsoft GraphDelegated
    Add Groups to call queues and auto attendantsGroup.ReadWrite.All(Read and write all groups)Microsoft GraphDelegated
    Update user licensesUser.ReadWrite.All(Read and write all users’ full profiles)Microsoft GraphApplication
    View user licenseDirectory.Read.All(Read directory data)Microsoft GraphApplication
    View user the calling information in user detailsCallRecords.Read.All(Read all call records)Microsoft GraphApplication
    View users’ Team settings in user detailsTeamMember.Read.All(Read the members of all teams)Microsoft GraphApplication
    View and manage channels in call queuesChannel.ReadBasic.All(Read the names and descriptions of all channels)Microsoft GraphApplication
    View and manage Teams in call queuesTeam.ReadBasic.All(Get a list of all teams)Microsoft GraphApplication
    View and manage user assignment in call queues and auto attendantsuser_impersonation(Access Microsoft Teams data as the signed in user)Skype and Teams Tenant Admin APIDelegated
    Assign phone number to usersuser_impersonation(Access Microsoft Teams data as the signed in user)Skype and Teams Tenant Admin APIDelegated
    Add security groups, mail-enabled security group, and distribution groups to call queuesExchange.ManageAsApp(Manage Exchange as application)*Note: The app must have the Exchange Administrator role, or you need to assign custom Exchange Online role groups to the app. For how to assign roles or Exchange Online role groups to the app, refer to the instructions in How to Assign the Exchange Administrator Role to an App?.Office 365 Exchange OnlineApplication