> For the complete documentation index, see [llms.txt](https://docs.easyplatform.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.easyplatform.app/reference/permission-tables.md). # Permission Tables *Last updated: 2026-03-20T12:20:27.065Z* ## Easy Call Report (PROD App ID: c42b0067-bfb5-4a33-8f9f-5f1ef2dfceb8) | Permission | Description | Access Type | Scope / Role | Role ID | | ----------------------------- | ---------------------------------------------------------------------------------------------------------------------------- | ----------- | ----------------------------- | ------------------------------------ | | CallRecord-PstnCalls.Read.All | Read all PSTN and Direct Routing call log data. | Application | CallRecord-PstnCalls.Read.All | a2611786-80b3-417e-adaa-707d4261a5f0 | | CallRecords.Read.All | Read call records for all calls and online meetings. | Application | CallRecords.Read.All | 45bbb07e-7321-4fd7-a8f6-3ff27e6a81c8 | | People.Read | Read the signed-in user's relevant people list (ranked contacts from multiple sources). | Delegated | People.Read | — | | Presence.Read.All | Read presence info for all users on behalf of signed-in user (activity, availability, status note, OOF, timezone, location). | Delegated | Presence.Read.All | — | | TeamworkActivity.Send | Send a teamwork activity (notification) to any user. | Application | TeamworkActivity.Send | a267235f-af13-44dc-8385-c1dc93023186 | | User.Read | Basic signed-in user profile. | Delegated | User.Read | — | | User.Read.All | Read full profiles of all users. | Delegated | User.Read.All | — | | User.Read.All | Read profiles of all users without a signed-in user. | Application | User.Read.All | df021288-bdef-4463-88db-98f22de89214 | | User.ReadBasic.All | Read basic profiles (name, email, photo, etc.) of all users. | Delegated | User.ReadBasic.All | — | | User.ReadBasic.All | Read basic profiles of all users without a signed-in user. | Application | User.ReadBasic.All | 97235f07-e226-4f63-ace3-39588e11d3a1 | ## Easy Call Report Admin (PROD App ID: 1825119b-4293-4a92-8a45-24ba908a24ed) | Permission | Description | Access Type | Scope / Role | Role ID | | --------------------------------------------------- | ------------------------------------------------------------------------- | ----------- | --------------------------------------------------- | ------------------------------------ | | Channel.ReadBasic.All | Read channel names & descriptions. | Delegated | Channel.ReadBasic.All | — | | Channel.ReadBasic.All | Read all channel names & descriptions across teams. | Application | Channel.ReadBasic.All | 59a6b24b-4225-4393-8165-ebaec5f55d7a | | Group.Read.All | Read all groups. | Delegated | Group.Read.All | — | | offline\_access | Allows issuing refresh tokens. | Delegated | offline\_access | — | | openid | OIDC scope for ID token. | Delegated | openid | — | | Presence.Read.All | Read presence information of all users in your organization. | Delegated | Presence.Read.All | — | | profile | Standard profile claims (name, email, etc.). | Delegated | profile | — | | Team.ReadBasic.All | Read team names & descriptions. | Delegated | Team.ReadBasic.All | — | | Team.ReadBasic.All | List all teams. | Application | Team.ReadBasic.All | 2280dda6-0bfd-44ee-a2f4-cb867cfc4c1e | | TeamsAppInstallation.ReadForTeam.All | Read installed Teams apps for all teams. | Application | TeamsAppInstallation.ReadForTeam.All | 1f615aea-6bf9-4b05-84bd-46388e138537 | | TeamsAppInstallation.ReadWriteAndConsentForTeam.All | Manage install & permission grants for Teams apps for all teams. | Application | TeamsAppInstallation.ReadWriteAndConsentForTeam.All | b0c13be0-8e20-4bc5-8c55-963c23a39ce9 | | TeamSettings.ReadWrite.All | Read and change all teams' settings. | Application | TeamSettings.ReadWrite.All | bdd80a03-d9bc-451d-b7c4-ce7c63fe3c8f | | user\_impersonation | Access Microsoft Teams and Skype for Business data as the signed in user. | Delegated | user\_impersonation | — | | User.Read | Basic signed-in user profile. | Delegated | User.Read | — | | User.Read.All | Read all users' full profiles. | Delegated | User.Read.All | — | ## Easy Calling (PROD App ID: 296d8ef4-d52f-45e0-9072-18cb81c71f89) | Permission | Description | Access Type | Scope / Role | Role ID | | ------------------------------ | ---------------------------------------------------------------------- | ----------- | ------------------------------ | ------------------------------------ | | CallEvents.Read.All | Read call event information for all users. | Application | CallEvents.Read.All | 1abb026f-7572-49f6-9ddd-ad61cbba181e | | Calls.AccessMedia.All | Direct access to media streams in a call. | Application | Calls.AccessMedia.All | a7a681dc-756e-4909-b988-f160edc6655f | | Calls.Initiate.All | Initiate 1:1 outbound calls and transfer calls. | Application | Calls.Initiate.All | 284383ee-7f6e-4e40-a2a8-e85dcb029101 | | Calls.InitiateGroupCall.All | Initiate outbound group calls and add participants. | Application | Calls.InitiateGroupCall.All | 4c277553-8a09-487b-8023-29ee378d8324 | | Calls.JoinGroupCall.All | Join group calls and scheduled meetings (as app with user privileges). | Application | Calls.JoinGroupCall.All | f6b49018-60ab-4f81-83bd-22caeabfed2d | | Calls.JoinGroupCallAsGuest.All | Join group calls and meetings anonymously (guest). | Application | Calls.JoinGroupCallAsGuest.All | fd7ccf6b-3d28-418b-9701-cd10f5cd2fd4 | | ChannelMember.Read.All | Read the members of channels (on behalf of signed-in user). | Delegated | ChannelMember.Read.All | — | | ChannelMember.Read.All | Read members of all channels (no user context). | Application | ChannelMember.Read.All | 3b55498e-47ec-484f-8136-9013221c06a9 | | Presence.Read.All | Read presence information for all users (on behalf of signed-in user). | Delegated | Presence.Read.All | — | | Presence.Read.All | Read presence info of all users (no user context). | Application | Presence.Read.All | a70e0c2d-e793-494c-94c4-118fa0a67f42 | | TeamworkActivity.Send | Send teamwork activity notifications to any user. | Application | TeamworkActivity.Send | a267235f-af13-44dc-8385-c1dc93023186 | | User.Read | Basic signed-in user profile. | Delegated | User.Read | — | | User.Read.All | Read full profiles of all users. | Delegated | User.Read.All | — | | User.Read.All | Read profiles of all users without a signed-in user. | Application | User.Read.All | df021288-bdef-4463-88db-98f22de89214 | ## Easy Calling Admin (PROD App ID: a0e65b85-69df-4711-84fc-db4ea85190a5) | Permission | Description | Access Type | Scope / Role | Role ID | | --------------------- | ------------------------------------------------------------------------- | ----------- | --------------------- | ------- | | Channel.ReadBasic.All | Read channel metadata with user context. | Delegated | Channel.ReadBasic.All | — | | Group.Read.All | Read Microsoft 365 groups across the tenant. | Delegated | Group.Read.All | — | | offline\_access | Allow Easy Calling admin to refresh access tokens. | Delegated | offline\_access | — | | openid | Enable OpenID Connect sign-in for Easy Calling admin. | Delegated | openid | — | | Presence.Read.All | Read presence for all users on behalf of the admin. | Delegated | Presence.Read.All | — | | profile | Request standard profile claims for Easy Calling admin. | Delegated | profile | — | | Team.ReadBasic.All | Read team names and descriptions (basic team metadata). | Delegated | Team.ReadBasic.All | — | | user\_impersonation | Access Microsoft Teams and Skype for Business data as the signed in user. | Delegated | user\_impersonation | — | | User.Read.All | Read full user profiles with user context. | Delegated | User.Read.All | — | ## Easy Console (PROD App ID: 267a71d8-bf35-4fbc-8fec-e60c70bcdeeb) | Permission | Description | Access Type | Scope / Role | Role ID | | ------------------ | ------------------------------------------------------------------------------------- | ----------- | ------------------ | ------- | | Chat.Create | Create chats on behalf of the signed-in user. | Delegated | Chat.Create | — | | ChatMessage.Send | Send chat messages on behalf of the signed-in user. | Delegated | ChatMessage.Send | — | | Contacts.ReadWrite | Create, read, update, and delete the signed‑in user's contacts. | Delegated | Contacts.ReadWrite | — | | Mail.Send | Send mail as users in the organization. | Delegated | Mail.Send | — | | Presence.Read | Read presence info for all users (on behalf of signed‑in user). | Delegated | Presence.Read | — | | Tasks.ReadWrite | Create, read, update, delete the signed‑in user's tasks and lists (including shared). | Delegated | Tasks.ReadWrite | — | | User.Read | Basic signed‑in user profile. | Delegated | User.Read | — | | User.Read.All | Read full profiles of all users. | Delegated | User.Read.All | — | ## Easy Directory (PROD App ID: 1a9a6a25-b2c3-4b56-85ff-4b72687073f1) | Permission | Description | Access Type | Scope / Role | Role ID | | ------------------------- | ------------------------------------------------------------------------- | ----------- | ------------------------- | ------------------------------------ | | Contacts.Read | Read all contacts in all mailboxes without a user. | Application | Contacts.Read | 089fe4d0-434a-44c5-8827-41ba8a0b17f5 | | Contacts.ReadWrite | Create, update, read, and delete the user's own contacts. | Delegated | Contacts.ReadWrite | — | | Contacts.ReadWrite.Shared | Manage contacts in shared mailboxes the user is permitted to access. | Delegated | Contacts.ReadWrite.Shared | — | | MailboxSettings.ReadWrite | Provides read/write mailbox settings access, including master categories. | Delegated | MailboxSettings.ReadWrite | — | | offline\_access | Allows issuing refresh tokens. | Delegated | offline\_access | — | | openid | Request an ID token (OIDC identity scope). | Delegated | openid | — | | Presence.Read.All | Read presence info of all users on behalf of the signed-in user. | Delegated | Presence.Read.All | — | | profile | Access standard profile claims (name, email, etc.). | Delegated | profile | — | | User.Read | Basic signed-in user profile. | Delegated | User.Read | — | | User.Read.All | Read full profiles of all users. | Delegated | User.Read.All | — | | User.Read.All | Read user profiles without a signed-in user. | Application | User.Read.All | df021288-bdef-4463-88db-98f22de89214 | ## Easy Directory Admin (PROD App ID: f1e99ba1-33ba-4dcf-825a-305546cdd084) | Permission | Description | Access Type | Scope / Role | Role ID | | ----------------- | ----------------------------------------------------------------------- | ----------- | ----------------- | ------- | | offline\_access | Allows issuing refresh tokens. | Delegated | offline\_access | — | | openid | OIDC scope for ID token. | Delegated | openid | — | | Presence.Read.All | Read presence information of all users on behalf of the signed-in user. | Delegated | Presence.Read.All | — | | profile | Standard profile claims (name, email, etc.). | Delegated | profile | — | | User.Read | Basic signed-in user profile. | Delegated | User.Read | — | | User.Read.All | Read all users' full profiles. | Delegated | User.Read.All | — | ## Easy Platform Configuration Center Admin (PROD App ID: ab075ccd-637d-41b8-b6c4-632d75ee771a) | Permission | Description | Access Type | Scope / Role | Role ID | | -------------------- | --------------------------------------------------------------------------- | ----------- | -------------------- | ------- | | Application.Read.All | Read applications and service principals on behalf of the signed-in user. | Delegated | Application.Read.All | — | | email | View users' email address (OIDC email claim). | Delegated | email | — | | offline\_access | Maintain access to data you have given it access to (issue refresh tokens). | Delegated | offline\_access | — | | openid | Sign users in (request ID token via OpenID Connect). | Delegated | openid | — | | Presence.Read.All | Read presence information of all users in your organization. | Delegated | Presence.Read.All | — | | profile | View basic profile information. | Delegated | profile | — | | User.Read | Sign in and read the signed-in user's profile. | Delegated | User.Read | — | | User.Read.All | Read full profiles of all users in the organization. | Delegated | User.Read.All | — | ## My Easy Platform (PROD App ID: fa0b142f-0e29-4aad-b4eb-0a4eb9dcd003) | Permission | Description | Access Type | Scope / Role | Role ID | | ----------------- | ------------------------------------------------------------ | ----------- | ----------------- | ------- | | email | View users' email address | Delegated | email | — | | offline\_access | Maintain access to data you have given it access to | Delegated | offline\_access | — | | openid | Sign users in | Delegated | openid | — | | Presence.Read | Read user's presence information | Delegated | Presence.Read | — | | Presence.Read.All | Read presence information of all users in your organization | Delegated | Presence.Read.All | — | | profile | View users' basic profile | Delegated | profile | — | | Tasks.ReadWrite | Create, read, update, and delete user's tasks and task lists | Delegated | Tasks.ReadWrite | — | | User.Read | Sign in and read user profile | Delegated | User.Read | — | | User.Read.All | Read all users' full profiles | Delegated | User.Read.All | — |