Home > Get Started > Permissions for App Authorization
Export to PDFPermissions for App Authorization
Refer to the required API permissions listed below to add the API permissions to your custom app.
| Feature/Module | API | Permission | Permission type | Purpose |
|---|---|---|---|---|
| Calling report | Microsoft Graph | CallRecords.Read.All (Read all call records) | Application | Read call records for all calls and online meetings. |
| Teams report | Microsoft Graph | Channel.ReadBasic.All(Read the names and descriptions of all channels) | Application | Read channel names and descriptions of Teams reporting. |
| Teams report | Microsoft Graph | ChannelMember.Read.All(Read the members of all channels) | Application | Read all channel messages of the Teams reporting. |
| Teams report | Microsoft Graph | ChannelMessage.Read.All(Read all channel messages) | Application | Read all channel messages of the Teams reporting. |
| Teams report | Microsoft Graph | Team.ReadBasic.All(Get a list of all teams) | Application | Read Teams basic information of Teams reporting. |
| Teams report | Microsoft Graph | TeamsTab.Read.All(Read tabs in Microsoft Teams) | Application | Read Teams tabs of Teams reporting. |
| SharePoint report | Microsoft Graph | Files.Read.All(Read files in all site collections) | Application | Read files in all site collections of the SharePoint reporting. |
| SharePoint report | Microsoft Graph | Reports.Read.All(Read all usage reports) | Application | Read usage report data of all reporting. |
| SharePoint report | Microsoft Graph | Sites.Read.All(Read items in all site collections) | Application | Read items in all site collections of the SharePoint reporting. |
| Copilot adoption report | Microsoft Graph | InformationProtectionPolicy.Read.All(Read all published labels and label policies for an organization.) | Application | Retrieve tenant sensitive labels that will be displayed in the Copilot report. |
| Copilot adoption report | Microsoft Graph | AiEnterpriseInteraction.Read.All(Read all AI enterprise interactions) | Application | Retrieve Microsoft 365 Copilot interaction data. |
| Scan job basic | Microsoft Graph | Directory.Read.All(Read directory data) | Application | Retrieve information from your organization’s Active Directory and integrate HRIS data with the Microsoft 365 data. |
| Scan job basic | Microsoft Graph | Group.Read.All(Read all groups) | Application | Inventory the groups for reporting purposes. |
| Scan job basic | Microsoft Graph | GroupMember.Read.All(Read all group memberships) | Application | Read group memberships of Pulse and Teams reporting. |
| Scan job basic | Microsoft Graph | Reports.Read.All(Read all usage reports) | Application | Read usage report data of all reporting. |
| Scan job basic | Microsoft Graph | User.Read(Sign in and read user profile) | Delegated | Retrieve your Microsoft 365 tenant information. |
| Scan job basic | Microsoft Graph | User.Read.All(Read all users' full profiles) | Application | Read user properties. |
| Scan job basic | Office 365 Management APIs | ActivityFeed.Read(Read activity data for your organization) | Application | An aggregation of actions and events for specified content types such as Microsoft Entra, SharePoint, OneDrive, Teams, or Viva Engage. |
| SharePoint report | Office 365 SharePoint Online | Sites.Read.All(Read items in all site collections) | Application | Read items in all site collections of the SharePoint reporting. |
| SharePoint report | Office 365 SharePoint Online | Sites.FullControl.All(Have full control of all site collections) | Application | Used in Sites that I own report to retrieve site owners and users with full control of sites.*Note: This permission can be removed in a custom app registration, but the Sites that I own report will not function. |
| Viva Engage report | Yammer | access_as_user(Read and write to the Yammer platform [preview]) | Delegated | To access the Viva Engage platform on behalf of the signed-in user. |
| Viva Engage report | Yammer | user_impersonation(Read and write to the Yammer platform [preview]) | Delegated | To access the Viva Engage platform on behalf of the signed-in user. |
*Note: The Directory.Read.All permission can be replaced with Application.Read.All and Organization.Read.All permissions.
On this page