Permission Tables

Last updated: 2026-03-18T08:07:12.161Z

This document is generated automatically. Do not edit it manually—update permissionCatalog.ts instead.

Easy Call Report (UAT App ID: b79e7ff6-ae9a-4d0c-a16a-e1544cc720f2)

Permission	Description	Access Type	Scope / Role	Role ID
CallRecord-PstnCalls.Read.All	Read all PSTN and Direct Routing call log data.	Application	CallRecord-PstnCalls.Read.All	a2611786-80b3-417e-adaa-707d4261a5f0
CallRecords.Read.All	Read call records for all calls and online meetings.	Application	CallRecords.Read.All	45bbb07e-7321-4fd7-a8f6-3ff27e6a81c8
People.Read	Read the signed-in user's relevant people list (ranked contacts from multiple sources).	Delegated	People.Read	—
Presence.Read.All	Read presence info for all users on behalf of signed-in user (activity, availability, status note, OOF, timezone, location).	Delegated	Presence.Read.All	—
TeamworkActivity.Send	Send a teamwork activity (notification) to any user.	Application	TeamworkActivity.Send	a267235f-af13-44dc-8385-c1dc93023186
User.Read	Basic signed-in user profile.	Delegated	User.Read	—
User.Read.All	Read full profiles of all users.	Delegated	User.Read.All	—
User.Read.All	Read profiles of all users without a signed-in user.	Application	User.Read.All	df021288-bdef-4463-88db-98f22de89214
User.ReadBasic.All	Read basic profiles (name, email, photo, etc.) of all users.	Delegated	User.ReadBasic.All	—
User.ReadBasic.All	Read basic profiles of all users without a signed-in user.	Application	User.ReadBasic.All	97235f07-e226-4f63-ace3-39588e11d3a1

Easy Call Report Admin (UAT App ID: de56d18c-f2ef-4445-ba4b-f720f48a3af5)

Permission	Description	Access Type	Scope / Role	Role ID
Channel.ReadBasic.All	Read channel names & descriptions.	Delegated	Channel.ReadBasic.All	—
Channel.ReadBasic.All	Read all channel names & descriptions across teams.	Application	Channel.ReadBasic.All	59a6b24b-4225-4393-8165-ebaec5f55d7a
Group.Read.All	Read all groups.	Delegated	Group.Read.All	—
offline_access	Allows issuing refresh tokens.	Delegated	offline_access	—
openid	OIDC scope for ID token.	Delegated	openid	—
Presence.Read.All	Read presence information of all users in your organization.	Delegated	Presence.Read.All	—
profile	Standard profile claims (name, email, etc.).	Delegated	profile	—
Team.ReadBasic.All	Read team names & descriptions.	Delegated	Team.ReadBasic.All	—
Team.ReadBasic.All	List all teams.	Application	Team.ReadBasic.All	2280dda6-0bfd-44ee-a2f4-cb867cfc4c1e
TeamsAppInstallation.ReadForTeam.All	Read installed Teams apps for all teams.	Application	TeamsAppInstallation.ReadForTeam.All	1f615aea-6bf9-4b05-84bd-46388e138537
TeamsAppInstallation.ReadWriteAndConsentForTeam.All	Manage install & permission grants for Teams apps for all teams.	Application	TeamsAppInstallation.ReadWriteAndConsentForTeam.All	b0c13be0-8e20-4bc5-8c55-963c23a39ce9
TeamSettings.ReadWrite.All	Read and change all teams' settings.	Application	TeamSettings.ReadWrite.All	bdd80a03-d9bc-451d-b7c4-ce7c63fe3c8f
user_impersonation	Access Microsoft Teams and Skype for Business data as the signed in user.	Delegated	user_impersonation	—
User.Read	Basic signed-in user profile.	Delegated	User.Read	—
User.Read.All	Read all users' full profiles.	Delegated	User.Read.All	—

Easy Calling (UAT App ID: ada25b44-23f0-4965-9481-dbb1377b9e81)

Permission	Description	Access Type	Scope / Role	Role ID
CallEvents.Read.All	Read call event information for all users.	Application	CallEvents.Read.All	1abb026f-7572-49f6-9ddd-ad61cbba181e
Calls.AccessMedia.All	Direct access to media streams in a call.	Application	Calls.AccessMedia.All	a7a681dc-756e-4909-b988-f160edc6655f
Calls.Initiate.All	Initiate 1:1 outbound calls and transfer calls.	Application	Calls.Initiate.All	284383ee-7f6e-4e40-a2a8-e85dcb029101
Calls.InitiateGroupCall.All	Initiate outbound group calls and add participants.	Application	Calls.InitiateGroupCall.All	4c277553-8a09-487b-8023-29ee378d8324
Calls.JoinGroupCall.All	Join group calls and scheduled meetings (as app with user privileges).	Application	Calls.JoinGroupCall.All	f6b49018-60ab-4f81-83bd-22caeabfed2d
Calls.JoinGroupCallAsGuest.All	Join group calls and meetings anonymously (guest).	Application	Calls.JoinGroupCallAsGuest.All	fd7ccf6b-3d28-418b-9701-cd10f5cd2fd4
ChannelMember.Read.All	Read the members of channels (on behalf of signed-in user).	Delegated	ChannelMember.Read.All	—
ChannelMember.Read.All	Read members of all channels (no user context).	Application	ChannelMember.Read.All	3b55498e-47ec-484f-8136-9013221c06a9
Presence.Read.All	Read presence information for all users (on behalf of signed-in user).	Delegated	Presence.Read.All	—
Presence.Read.All	Read presence info of all users (no user context).	Application	Presence.Read.All	a70e0c2d-e793-494c-94c4-118fa0a67f42
TeamworkActivity.Send	Send teamwork activity notifications to any user.	Application	TeamworkActivity.Send	a267235f-af13-44dc-8385-c1dc93023186
User.Read	Basic signed-in user profile.	Delegated	User.Read	—
User.Read.All	Read full profiles of all users.	Delegated	User.Read.All	—
User.Read.All	Read profiles of all users without a signed-in user.	Application	User.Read.All	df021288-bdef-4463-88db-98f22de89214

Easy Calling Admin (UAT App ID: 8f3f4782-6437-48d0-91af-5245dd139b2b)

Permission	Description	Access Type	Scope / Role	Role ID
Channel.ReadBasic.All	Read channel metadata with user context.	Delegated	Channel.ReadBasic.All	—
Group.Read.All	Read Microsoft 365 groups across the tenant.	Delegated	Group.Read.All	—
offline_access	Allow Easy Calling admin to refresh access tokens.	Delegated	offline_access	—
openid	Enable OpenID Connect sign-in for Easy Calling admin.	Delegated	openid	—
Presence.Read.All	Read presence for all users on behalf of the admin.	Delegated	Presence.Read.All	—
profile	Request standard profile claims for Easy Calling admin.	Delegated	profile	—
Team.ReadBasic.All	Read team names and descriptions (basic team metadata).	Delegated	Team.ReadBasic.All	—
user_impersonation	Access Microsoft Teams and Skype for Business data as the signed in user.	Delegated	user_impersonation	—
User.Read.All	Read full user profiles with user context.	Delegated	User.Read.All	—

Easy Console (UAT App ID: 56782562-b061-40d6-9949-399b38c28d0b)

Permission	Description	Access Type	Scope / Role	Role ID
Chat.Create	Create chats on behalf of the signed-in user.	Delegated	Chat.Create	—
ChatMessage.Send	Send chat messages on behalf of the signed-in user.	Delegated	ChatMessage.Send	—
Contacts.ReadWrite	Create, read, update, and delete the signed‑in user's contacts.	Delegated	Contacts.ReadWrite	—
Mail.Send	Send mail as users in the organization.	Delegated	Mail.Send	—
Presence.Read	Read presence info for all users (on behalf of signed‑in user).	Delegated	Presence.Read	—
Tasks.ReadWrite	Create, read, update, delete the signed‑in user's tasks and lists (including shared).	Delegated	Tasks.ReadWrite	—
User.Read	Basic signed‑in user profile.	Delegated	User.Read	—
User.Read.All	Read full profiles of all users.	Delegated	User.Read.All	—

Easy Directory (UAT App ID: d490e078-558f-44d1-9bd6-5c7173129581)

Permission	Description	Access Type	Scope / Role	Role ID
Contacts.Read	Read all contacts in all mailboxes without a user.	Application	Contacts.Read	089fe4d0-434a-44c5-8827-41ba8a0b17f5
Contacts.ReadWrite	Create, update, read, and delete the user's own contacts.	Delegated	Contacts.ReadWrite	—
Contacts.ReadWrite.Shared	Manage contacts in shared mailboxes the user is permitted to access.	Delegated	Contacts.ReadWrite.Shared	—
MailboxSettings.ReadWrite	Provides read/write mailbox settings access, including master categories.	Delegated	MailboxSettings.ReadWrite	—
offline_access	Allows issuing refresh tokens.	Delegated	offline_access	—
openid	Request an ID token (OIDC identity scope).	Delegated	openid	—
Presence.Read.All	Read presence info of all users on behalf of the signed-in user.	Delegated	Presence.Read.All	—
profile	Access standard profile claims (name, email, etc.).	Delegated	profile	—
User.Read	Basic signed-in user profile.	Delegated	User.Read	—
User.Read.All	Read full profiles of all users.	Delegated	User.Read.All	—
User.Read.All	Read user profiles without a signed-in user.	Application	User.Read.All	df021288-bdef-4463-88db-98f22de89214

Easy Directory Admin (UAT App ID: d492f0d7-ff1f-420e-8e44-09a4c0a04180)

Permission	Description	Access Type	Scope / Role	Role ID
offline_access	Allows issuing refresh tokens.	Delegated	offline_access	—
openid	OIDC scope for ID token.	Delegated	openid	—
Presence.Read.All	Read presence information of all users on behalf of the signed-in user.	Delegated	Presence.Read.All	—
profile	Standard profile claims (name, email, etc.).	Delegated	profile	—
User.Read	Basic signed-in user profile.	Delegated	User.Read	—
User.Read.All	Read all users' full profiles.	Delegated	User.Read.All	—

Easy Platform Configuration Center Admin (UAT App ID: 2c7f7427-431e-4d98-9935-0d709bbde363)

Permission	Description	Access Type	Scope / Role	Role ID
Application.Read.All	Read applications and service principals on behalf of the signed-in user.	Delegated	Application.Read.All	—
email	View users' email address (OIDC email claim).	Delegated	email	—
offline_access	Maintain access to data you have given it access to (issue refresh tokens).	Delegated	offline_access	—
openid	Sign users in (request ID token via OpenID Connect).	Delegated	openid	—
Presence.Read.All	Read presence information of all users in your organization.	Delegated	Presence.Read.All	—
profile	View basic profile information.	Delegated	profile	—
User.Read	Sign in and read the signed-in user's profile.	Delegated	User.Read	—
User.Read.All	Read full profiles of all users in the organization.	Delegated	User.Read.All	—

My Easy Platform (UAT App ID: 84c8738b-fc95-4257-8fb6-7c7a0f8a6c1a)

Permission	Description	Access Type	Scope / Role	Role ID
email	View users' email address	Delegated	email	—
offline_access	Maintain access to data you have given it access to	Delegated	offline_access	—
openid	Sign users in	Delegated	openid	—
Presence.Read	Read user's presence information	Delegated	Presence.Read	—
Presence.Read.All	Read presence information of all users in your organization	Delegated	Presence.Read.All	—
profile	View users' basic profile	Delegated	profile	—
Tasks.ReadWrite	Create, read, update, and delete user's tasks and task lists	Delegated	Tasks.ReadWrite	—
User.Read	Sign in and read user profile	Delegated	User.Read	—
User.Read.All	Read all users' full profiles	Delegated	User.Read.All	—