Granting Permission
The Microsoft 365 global administrator needs to grant permission for Analytics 365 to collect data from your Microsoft account.
Please click on the appropriate tab for a detailed list of all Microsoft permissions.
Call Analytics Permissions
Microsoft permissions required for user authentication are:
|
Microsoft Permission Name
|
Microsoft Graph Name
|
Purpose
|
|
View users’ basic profile
|
User.Read
|
Maintains the app's access to user data when the user is not actively signed in.
|
|
Maintain access to data you have given it access to
|
offline_access
|
Syncs user data when the user is not actively signed in.
|
|
Consent on behalf of your organisation
|
N/A
|
Allows an administrator to grant consent for all users within the organization simplifying deployment and ensuring that permissions are allocated consistently. |
Microsoft permissions required for app operations are:
|
Microsoft Permission Name
|
Microsoft Graph Name
|
Purpose
|
|
Get the list of the teams of the signed-in user
|
Team.ReadBasic.All
|
Provides the app with a list of teams the signed-in user is a member of.
|
|
Access Microsoft Teams and Skype for Business data as the signed-in user
|
Chats.Read, Presence.Read, OnlineMeetings.ReadWrite
|
Accesses Teams and Skype for Business chats, meetings, and availability status of the signed-in user.
|
|
application_access
|
N/A - Custom permission
|
Internal custom scope authorizing the app to service backend communications.
|
|
Read user’s presence information
|
Presence.Read
|
Allows the app to read the availability status of the signed-in user.
|
|
Read presence information of all users in your organization
|
Presence.Read.All
|
Allows the app to read the availability status of all users in the organization.
|
|
Sign in and read user profile
|
User.Read
|
Allows users to sign in, and the app to read their basic profile.
|
|
Read PSTN and direct routing call log data
|
CallRecord-PstnCalls.Read.All
|
Allows the app to read PSTN and direct routing call records.
|
|
Read all call records
|
CallRecords.Read.All
|
Allows the app to access the metadata of calls and online meetings.
|
|
Read directory data
|
Directory.Read.All
|
Allows the app to read the organization's full directory. |
|
Read all groups
|
Group.Read.All
|
Allows the app to read metadata and conversations for all Microsoft 365 groups.
|
|
Read all group memberships
|
GroupMember.Read.All
|
Allows the app to read group memberships of the organization.
|
|
Read all user mailbox settings |
MailboxSettings.Read
|
Allows the app to read the user's mailbox preferences such as time zone and auto-reply settings. |
|
Read and write presence information for all users
|
Presence.ReadWrite.All
|
Allows the app to read and update the availability status of all users. |
Recording Permissions
Microsoft permissions needed for AI Powered Recording are those required to synchronize with Microsoft and to enable the recording interface.
When granting permission, two users will be created in your Azure directory: TollringMsTeamsRecorder and TollringMsTeamsRecorderCompliance. They should NOT be deleted. These users are associated with your Microsoft recording policy and direct traffic to the recording portal.
Microsoft permissions required for user authentication are:
|
Microsoft Permission Name
|
Microsoft Graph Name
|
Purpose
|
|
View users’ basic profile
|
User.Read
|
Maintains the app's access to user data when the user is not actively signed in.
|
|
Maintain access to data you have given it access to
|
offline_access
|
Syncs user data when the user is not actively signed in.
|
|
Consent on behalf of your organisation
|
N/A
|
Allows an administrator to grant consent for all users within the organization simplifying deployment and ensuring that permissions are allocated consistently.
|
Microsoft permissions required for app operations are:
|
Microsoft Permission Name
|
Microsoft Graph Name
|
Purpose
|
|
Sign in and read user profile
|
User.Read
|
Allows users to sign in, and the app to read their basic profile.
|
|
Read PSTN and direct routing call log data
|
CallRecord-PstnCalls.Read.All
|
Allows the app to read PSTN and direct routing call records.
|
|
Read all call records
|
CallRecords.Read.All
|
Allows the app to access the metadata of calls and online meetings.
|
|
Access media streams in a call as an app
|
Calls.AccessMedia.All
|
Allows the app to record and transcribe audio and video calls to provide conversation analytics.
|
|
Initiate outgoing 1-to-1 calls from the app
|
Calls.Initiate
|
Allows users to initiate one-to-one calls within the app.
|
|
Initiate outgoing group calls from the app
|
Calls.InitiateGroupCall.All
|
Allows the app to start group calls on the user's behalf.
|
|
Join group calls and meetings as an app
|
Calls.JoinGroupCall.All
|
Allows the app to join group calls and meetings as a participant so calls can be recorded.
|
|
Join group calls and meetings as a guest
|
Calls.JoinGroupCallAsGuest.All
|
Allows the app to join group calls and meetings as a guest user so calls can be recorded.
|
|
Read all users' full profiles
|
User.Read.All
|
Allows the app to read the job title, department, and manager of all users.
|
|
Get the list of the teams of the signed-in user
|
Team.ReadBasic.All
|
Provides the app with a list of teams the signed-in user is a member of.
|
|
Access Microsoft Teams and Skype for Business data as the signed-in user
|
Chats.Read, Presence.Read, OnlineMeetings.ReadWrite
|
Accesses Teams and Skype for Business chats, meetings, and availability status of the signed-in user.
|
|
application_access
|
N/A - Custom permission
|
Internal custom scope authorizing the app to service backend communications.
|
Collaboration Analytics Permissions
Microsoft 365 global administrators can choose permissions for Collaboration Analytics based on your organization's data security policy.
Microsoft permissions required for user authentication are:
Microsoft Permission Name | Microsoft Graph Name | Purpose |
View users’ basic profile | User.Read | Maintains the app's access to user data when the user is not actively signed in. |
Maintain access to data you have given it access to | offline_access | Syncs user data when the user is not actively signed in. |
Consent on behalf of your organisation | N/A | Allows an administrator to grant consent for all users within the organization simplifying deployment and ensuring that permissions are allocated consistently. |
Microsoft permissions required for app operations are:
Microsoft Permission Name | Microsoft Graph Name | Purpose |
Sign in and read user profile | User.Read | Allows users to sign in, and the app to read their basic profile. |
Read all chat messages | Chat.Read.All | Allows the app to read chat messages. |
Read all channel messages | ChannelMessage.Read.All | Allows the app to read channel messages across all Teams. |
Read all user mailbox settings | MailboxSettings.Read | Allows the app to read the user's mailbox preferences such as time zone and auto-reply settings. |
Read directory data | Directory.Read.All | Allows the app to read the organization's full directory. |
Read calendars in all mailboxes | Calendars.Read | Allows the app to read calendar events of all mailboxes. |
Read all call records | CallRecords.Read.All | Allows the app to access the metadata of calls and online meetings. |
Read PSTN and direct routing call log data | CallRecord-PstnCalls.Read.All | Allows the app to read PSTN and direct routing call records. |
Read the members of all chats | ChatMember.Read.All | Allows the app to read the participants of all chats messages |
Please note: disabling permissions will restrict the analytics displayed.