Home > Get Started > Permissions for App Authorization > Permissions for Calling Management
Export to PDFThe table below lists the permissions that you need to consent when adding the EnPower for Teams Calling service app in AvePoint Online Services. Currently, custom Azure app cannot be used for calling management in EnPower.
*Note: For Exchange-related tasks, including recipient management and protection features, you need to go to the Microsoft Entra admin center (or Azure portal) to assign the Exchange Administrator role to the EnPower for Teams calling app. For detailed steps, refer to Assign Administrator Roles to the App section in Create App Profile.
| EnPower feature | Permission | API | Type |
|---|---|---|---|
| View user details | User.Read.All(Read all users’ full profiles) | Microsoft Graph | Delegated |
| View user details | AppCatalog.ReadWrite.All(Read and write to all app catalogs) | Microsoft Graph | Delegated |
| Add Groups to call queues and auto attendants | Group.ReadWrite.All(Read and write all groups) | Microsoft Graph | Delegated |
| Update user licenses | User.ReadWrite.All(Read and write all users’ full profiles) | Microsoft Graph | Application |
| View user license | Directory.Read.All(Read directory data) | Microsoft Graph | Application |
| View user the calling information in user details | CallRecords.Read.All(Read all call records) | Microsoft Graph | Application |
| View users’ Team settings in user details | TeamMember.Read.All(Read the members of all teams) | Microsoft Graph | Application |
| View and manage channels in call queues | Channel.ReadBasic.All(Read the names and descriptions of all channels) | Microsoft Graph | Application |
| View and manage Teams in call queues | Team.ReadBasic.All(Get a list of all teams) | Microsoft Graph | Application |
| View and manage user assignment in call queues and auto attendants | user_impersonation(Access Microsoft Teams data as the signed in user) | Skype and Teams Tenant Admin API | Delegated |
| Assign phone number to users | user_impersonation(Access Microsoft Teams data as the signed in user) | Skype and Teams Tenant Admin API | Delegated |
| Add security groups, mail-enabled security group, and distribution groups to call queues | Exchange.ManageAsApp(Manage Exchange as application)*Note: The app must have the Exchange Administrator role, or you need to assign custom Exchange Online role groups to the app. For how to assign roles or Exchange Online role groups to the app, refer to the instructions in How to Assign the Exchange Administrator Role to an App?. | Office 365 Exchange Online | Application |