Permission Tables

Last updated: 2026-03-20T12:20:27.065Z

This document is generated automatically. Do not edit it manually—update permissionCatalog.ts instead.

Easy Call Report (PROD App ID: c42b0067-bfb5-4a33-8f9f-5f1ef2dfceb8)

Permission	Description	Access Type	Scope / Role	Role ID
CallRecord-PstnCalls.Read.All	Read all PSTN and Direct Routing call log data.	Application	CallRecord-PstnCalls.Read.All	a2611786-80b3-417e-adaa-707d4261a5f0
CallRecords.Read.All	Read call records for all calls and online meetings.	Application	CallRecords.Read.All	45bbb07e-7321-4fd7-a8f6-3ff27e6a81c8
People.Read	Read the signed-in user's relevant people list (ranked contacts from multiple sources).	Delegated	People.Read	—
Presence.Read.All	Read presence info for all users on behalf of signed-in user (activity, availability, status note, OOF, timezone, location).	Delegated	Presence.Read.All	—
TeamworkActivity.Send	Send a teamwork activity (notification) to any user.	Application	TeamworkActivity.Send	a267235f-af13-44dc-8385-c1dc93023186
User.Read	Basic signed-in user profile.	Delegated	User.Read	—
User.Read.All	Read full profiles of all users.	Delegated	User.Read.All	—
User.Read.All	Read profiles of all users without a signed-in user.	Application	User.Read.All	df021288-bdef-4463-88db-98f22de89214
User.ReadBasic.All	Read basic profiles (name, email, photo, etc.) of all users.	Delegated	User.ReadBasic.All	—
User.ReadBasic.All	Read basic profiles of all users without a signed-in user.	Application	User.ReadBasic.All	97235f07-e226-4f63-ace3-39588e11d3a1

Easy Call Report Admin (PROD App ID: 1825119b-4293-4a92-8a45-24ba908a24ed)

Permission	Description	Access Type	Scope / Role	Role ID
Channel.ReadBasic.All	Read channel names & descriptions.	Delegated	Channel.ReadBasic.All	—
Channel.ReadBasic.All	Read all channel names & descriptions across teams.	Application	Channel.ReadBasic.All	59a6b24b-4225-4393-8165-ebaec5f55d7a
Group.Read.All	Read all groups.	Delegated	Group.Read.All	—
offline_access	Allows issuing refresh tokens.	Delegated	offline_access	—
openid	OIDC scope for ID token.	Delegated	openid	—
Presence.Read.All	Read presence information of all users in your organization.	Delegated	Presence.Read.All	—
profile	Standard profile claims (name, email, etc.).	Delegated	profile	—
Team.ReadBasic.All	Read team names & descriptions.	Delegated	Team.ReadBasic.All	—
Team.ReadBasic.All	List all teams.	Application	Team.ReadBasic.All	2280dda6-0bfd-44ee-a2f4-cb867cfc4c1e
TeamsAppInstallation.ReadForTeam.All	Read installed Teams apps for all teams.	Application	TeamsAppInstallation.ReadForTeam.All	1f615aea-6bf9-4b05-84bd-46388e138537
TeamsAppInstallation.ReadWriteAndConsentForTeam.All	Manage install & permission grants for Teams apps for all teams.	Application	TeamsAppInstallation.ReadWriteAndConsentForTeam.All	b0c13be0-8e20-4bc5-8c55-963c23a39ce9
TeamSettings.ReadWrite.All	Read and change all teams' settings.	Application	TeamSettings.ReadWrite.All	bdd80a03-d9bc-451d-b7c4-ce7c63fe3c8f
user_impersonation	Access Microsoft Teams and Skype for Business data as the signed in user.	Delegated	user_impersonation	—
User.Read	Basic signed-in user profile.	Delegated	User.Read	—
User.Read.All	Read all users' full profiles.	Delegated	User.Read.All	—

Easy Calling (PROD App ID: 296d8ef4-d52f-45e0-9072-18cb81c71f89)

Permission	Description	Access Type	Scope / Role	Role ID
CallEvents.Read.All	Read call event information for all users.	Application	CallEvents.Read.All	1abb026f-7572-49f6-9ddd-ad61cbba181e
Calls.AccessMedia.All	Direct access to media streams in a call.	Application	Calls.AccessMedia.All	a7a681dc-756e-4909-b988-f160edc6655f
Calls.Initiate.All	Initiate 1:1 outbound calls and transfer calls.	Application	Calls.Initiate.All	284383ee-7f6e-4e40-a2a8-e85dcb029101
Calls.InitiateGroupCall.All	Initiate outbound group calls and add participants.	Application	Calls.InitiateGroupCall.All	4c277553-8a09-487b-8023-29ee378d8324
Calls.JoinGroupCall.All	Join group calls and scheduled meetings (as app with user privileges).	Application	Calls.JoinGroupCall.All	f6b49018-60ab-4f81-83bd-22caeabfed2d
Calls.JoinGroupCallAsGuest.All	Join group calls and meetings anonymously (guest).	Application	Calls.JoinGroupCallAsGuest.All	fd7ccf6b-3d28-418b-9701-cd10f5cd2fd4
ChannelMember.Read.All	Read the members of channels (on behalf of signed-in user).	Delegated	ChannelMember.Read.All	—
ChannelMember.Read.All	Read members of all channels (no user context).	Application	ChannelMember.Read.All	3b55498e-47ec-484f-8136-9013221c06a9
Presence.Read.All	Read presence information for all users (on behalf of signed-in user).	Delegated	Presence.Read.All	—
Presence.Read.All	Read presence info of all users (no user context).	Application	Presence.Read.All	a70e0c2d-e793-494c-94c4-118fa0a67f42
TeamworkActivity.Send	Send teamwork activity notifications to any user.	Application	TeamworkActivity.Send	a267235f-af13-44dc-8385-c1dc93023186
User.Read	Basic signed-in user profile.	Delegated	User.Read	—
User.Read.All	Read full profiles of all users.	Delegated	User.Read.All	—
User.Read.All	Read profiles of all users without a signed-in user.	Application	User.Read.All	df021288-bdef-4463-88db-98f22de89214

Easy Calling Admin (PROD App ID: a0e65b85-69df-4711-84fc-db4ea85190a5)

Permission	Description	Access Type	Scope / Role	Role ID
Channel.ReadBasic.All	Read channel metadata with user context.	Delegated	Channel.ReadBasic.All	—
Group.Read.All	Read Microsoft 365 groups across the tenant.	Delegated	Group.Read.All	—
offline_access	Allow Easy Calling admin to refresh access tokens.	Delegated	offline_access	—
openid	Enable OpenID Connect sign-in for Easy Calling admin.	Delegated	openid	—
Presence.Read.All	Read presence for all users on behalf of the admin.	Delegated	Presence.Read.All	—
profile	Request standard profile claims for Easy Calling admin.	Delegated	profile	—
Team.ReadBasic.All	Read team names and descriptions (basic team metadata).	Delegated	Team.ReadBasic.All	—
user_impersonation	Access Microsoft Teams and Skype for Business data as the signed in user.	Delegated	user_impersonation	—
User.Read.All	Read full user profiles with user context.	Delegated	User.Read.All	—

Easy Console (PROD App ID: 267a71d8-bf35-4fbc-8fec-e60c70bcdeeb)

Permission	Description	Access Type	Scope / Role	Role ID
Chat.Create	Create chats on behalf of the signed-in user.	Delegated	Chat.Create	—
ChatMessage.Send	Send chat messages on behalf of the signed-in user.	Delegated	ChatMessage.Send	—
Contacts.ReadWrite	Create, read, update, and delete the signed‑in user's contacts.	Delegated	Contacts.ReadWrite	—
Mail.Send	Send mail as users in the organization.	Delegated	Mail.Send	—
Presence.Read	Read presence info for all users (on behalf of signed‑in user).	Delegated	Presence.Read	—
Tasks.ReadWrite	Create, read, update, delete the signed‑in user's tasks and lists (including shared).	Delegated	Tasks.ReadWrite	—
User.Read	Basic signed‑in user profile.	Delegated	User.Read	—
User.Read.All	Read full profiles of all users.	Delegated	User.Read.All	—

Easy Directory (PROD App ID: 1a9a6a25-b2c3-4b56-85ff-4b72687073f1)

Permission	Description	Access Type	Scope / Role	Role ID
Contacts.Read	Read all contacts in all mailboxes without a user.	Application	Contacts.Read	089fe4d0-434a-44c5-8827-41ba8a0b17f5
Contacts.ReadWrite	Create, update, read, and delete the user's own contacts.	Delegated	Contacts.ReadWrite	—
Contacts.ReadWrite.Shared	Manage contacts in shared mailboxes the user is permitted to access.	Delegated	Contacts.ReadWrite.Shared	—
MailboxSettings.ReadWrite	Provides read/write mailbox settings access, including master categories.	Delegated	MailboxSettings.ReadWrite	—
offline_access	Allows issuing refresh tokens.	Delegated	offline_access	—
openid	Request an ID token (OIDC identity scope).	Delegated	openid	—
Presence.Read.All	Read presence info of all users on behalf of the signed-in user.	Delegated	Presence.Read.All	—
profile	Access standard profile claims (name, email, etc.).	Delegated	profile	—
User.Read	Basic signed-in user profile.	Delegated	User.Read	—
User.Read.All	Read full profiles of all users.	Delegated	User.Read.All	—
User.Read.All	Read user profiles without a signed-in user.	Application	User.Read.All	df021288-bdef-4463-88db-98f22de89214

Easy Directory Admin (PROD App ID: f1e99ba1-33ba-4dcf-825a-305546cdd084)

Permission	Description	Access Type	Scope / Role	Role ID
offline_access	Allows issuing refresh tokens.	Delegated	offline_access	—
openid	OIDC scope for ID token.	Delegated	openid	—
Presence.Read.All	Read presence information of all users on behalf of the signed-in user.	Delegated	Presence.Read.All	—
profile	Standard profile claims (name, email, etc.).	Delegated	profile	—
User.Read	Basic signed-in user profile.	Delegated	User.Read	—
User.Read.All	Read all users' full profiles.	Delegated	User.Read.All	—

Easy Platform Configuration Center Admin (PROD App ID: ab075ccd-637d-41b8-b6c4-632d75ee771a)

Permission	Description	Access Type	Scope / Role	Role ID
Application.Read.All	Read applications and service principals on behalf of the signed-in user.	Delegated	Application.Read.All	—
email	View users' email address (OIDC email claim).	Delegated	email	—
offline_access	Maintain access to data you have given it access to (issue refresh tokens).	Delegated	offline_access	—
openid	Sign users in (request ID token via OpenID Connect).	Delegated	openid	—
Presence.Read.All	Read presence information of all users in your organization.	Delegated	Presence.Read.All	—
profile	View basic profile information.	Delegated	profile	—
User.Read	Sign in and read the signed-in user's profile.	Delegated	User.Read	—
User.Read.All	Read full profiles of all users in the organization.	Delegated	User.Read.All	—

My Easy Platform (PROD App ID: fa0b142f-0e29-4aad-b4eb-0a4eb9dcd003)

Permission	Description	Access Type	Scope / Role	Role ID
email	View users' email address	Delegated	email	—
offline_access	Maintain access to data you have given it access to	Delegated	offline_access	—
openid	Sign users in	Delegated	openid	—
Presence.Read	Read user's presence information	Delegated	Presence.Read	—
Presence.Read.All	Read presence information of all users in your organization	Delegated	Presence.Read.All	—
profile	View users' basic profile	Delegated	profile	—
Tasks.ReadWrite	Create, read, update, and delete user's tasks and task lists	Delegated	Tasks.ReadWrite	—
User.Read	Sign in and read user profile	Delegated	User.Read	—
User.Read.All	Read all users' full profiles	Delegated	User.Read.All	—