Granting Permission
The Microsoft 365 global administrator needs to grant permission for Analytics 365 to collect data from your Microsoft account.
Please click on the appropriate tab for a detailed list of all Microsoft permissions.
Call Analytics Permissions
Permissions needed for Call Analytics:
- Access to call data to enable call analytics to collect call events. Permission is to be granted by the Microsoft global administrator.
- Access to presence (Teams status) and incoming number data to enable access to live user status and incoming number data. Permission can be granted by the Microsoft global administrator, or can be delegated to the Microsoft Teams administrator or Teams Reader.
Microsoft permissions required for user authentication are:
|
Microsoft Permission Name
|
Microsoft API Name
|
Purpose
|
|
View users’ basic profile
|
User.Read
|
Maintains the app's access to user data when the user is not actively signed in.
|
|
Maintain access to data you have given it access to
|
offline_access
|
Syncs user data when the user is not actively signed in.
|
|
Consent on behalf of your organisation
|
N/A
|
Allows an administrator to grant consent for all users within the organization simplifying deployment and ensuring that permissions are allocated consistently. |
Microsoft permissions required for app operations are:
|
Microsoft Permission Name
|
Microsoft API Name
|
Purpose
|
|
Get the list of the teams of the signed-in user
|
Team.ReadBasic.All
|
Provides the app with a list of teams the signed-in user is a member of.
|
|
Access Microsoft Teams and Skype for Business data as the signed-in user
|
user.impersonation
|
Allows the app to have the same access to information in the directory as the signed-in user.
|
|
N/A - Custom permission
|
application_access
|
Internal custom scope authorizing the app to service backend communications.
|
|
Read user’s presence information
|
Presence.Read
|
Allows the app to read the availability status of the signed-in user.
|
|
Read presence information of all users in your organization
|
Presence.Read.All
|
Allows the app to read the availability status of all users in the organization.
|
|
Sign in and read user profile
|
User.Read
|
Allows users to sign in, and the app to read their basic profile.
|
|
Sign in and read users' full profile
|
User.Read.All
|
Allows the app to read the profiles of all users.
|
|
Read PSTN and direct routing call log data
|
CallRecord-PstnCalls.Read.All
|
Allows the app to read PSTN and direct routing call records
|
|
Read all call records
|
CallRecords.Read.All
|
Allows the app to access the metadata of calls and online meetings. |
|
Read directory data
|
Directory.Read.All
|
Allows the app to read the organization's full directory.
|
|
Read all groups
|
Group.Read.All
|
Allows the app to read metadata and conversations for all Microsoft 365 groups.
|
|
Read all group memberships |
GroupMember.Read.All
|
Allows the app to read group memberships of the organization. |
Recording Permissions
Microsoft permissions needed for AI Powered Recording are those required to synchronize with Microsoft and to enable the recording interface.
When granting permission, two users will be created in your Azure directory: TollringMsTeamsRecorder and TollringMsTeamsRecorderCompliance. They should NOT be deleted. These users are associated with your Microsoft recording policy and direct traffic to the recording portal.
Microsoft permissions required for user authentication are:
|
Microsoft Permission Name
|
Microsoft Graph Name
|
Purpose
|
|
View users’ basic profile
|
User.Read
|
Maintains the app's access to user data when the user is not actively signed in.
|
|
Maintain access to data you have given it access to
|
offline_access
|
Syncs user data when the user is not actively signed in.
|
|
Consent on behalf of your organisation
|
N/A
|
Allows an administrator to grant consent for all users within the organization simplifying deployment and ensuring that permissions are allocated consistently.
|
Microsoft permissions required for app operations are:
|
Microsoft Permission Name
|
Microsoft Graph Name
|
Purpose
|
|
Sign in and read user profile
|
User.Read
|
Allows users to sign in, and the app to read their basic profile.
|
|
Read PSTN and direct routing call log data
|
CallRecord-PstnCalls.Read.All
|
Allows the app to read PSTN and direct routing call records.
|
|
Read all call records
|
CallRecords.Read.All
|
Allows the app to access the metadata of calls and online meetings.
|
|
Access media streams in a call as an app
|
Calls.AccessMedia.All
|
Allows the app to record and transcribe audio and video calls to provide conversation analytics.
|
|
Join group calls and meetings as an app
|
Calls.JoinGroupCall.All
|
Allows the app to join group calls and meetings as a participant so calls can be recorded.
|
|
Join group calls and meetings as a guest
|
Calls.JoinGroupCallAsGuest.All
|
Allows the app to join group calls and meetings as a guest user so calls can be recorded.
|
|
Read all users' full profiles
|
User.Read.All
|
Allows the app to read the job title, department, and manager of all users.
|
|
Get the list of the teams of the signed-in user
|
Team.ReadBasic.All
|
Provides the app with a list of teams the signed-in user is a member of.
|
|
Read all groups
|
Group.Read.All
|
Allows the app to read metadata for all Microsoft 365 groups.
|
|
N/A - Custom permission
|
application_access
|
Internal custom scope authorizing the app to service backend communications.
|
Collaboration Analytics Permissions
Microsoft 365 global administrators can choose permissions for Collaboration Analytics based on your organization's data security policy.
Microsoft permissions required for user authentication are:
Microsoft Permission Name | Microsoft Graph Name | Purpose |
View users’ basic profile | User.Read | Maintains the app's access to user data when the user is not actively signed in. |
Maintain access to data you have given it access to | offline_access | Syncs user data when the user is not actively signed in. |
Consent on behalf of your organisation | N/A | Allows an administrator to grant consent for all users within the organization simplifying deployment and ensuring that permissions are allocated consistently. |
Microsoft permissions required for app operations are:
Microsoft Permission Name | Microsoft Graph Name | Purpose |
Sign in and read user profile | User.Read | Allows users to sign in, and the app to read their basic profile. |
Read all chat messages | Chat.Read.All | Allows the app to read chat messages. |
Read all channel messages | ChannelMessage.Read.All | Allows the app to read channel messages across all Teams. |
Read all user mailbox settings | MailboxSettings.Read | Allows the app to read the user's mailbox preferences such as time zone and auto-reply settings. |
Read directory data | Directory.Read.All | Allows the app to read the organization's full directory. |
Read calendars in all mailboxes | Calendars.Read | Allows the app to read calendar events of all mailboxes. |
Read all call records | CallRecords.Read.All | Allows the app to access the metadata of calls and online meetings. |
Read PSTN and direct routing call log data | CallRecord-PstnCalls.Read.All | Allows the app to read PSTN and direct routing call records. |
Read the members of all chats | ChatMember.Read.All | Allows the app to read the participants of all chats messages |
Please note: disabling permissions will restrict the analytics displayed.