> For the complete documentation index, see [llms.txt](https://docs.easyplatform.app/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.easyplatform.app/reference/permission-tables.md). # Permission Tables *Last updated: 2026-03-20T12:20:27.065Z* This document is generated automatically. Do not edit it manually—update `permissionCatalog.ts` instead. ## Easy Call Report (PROD App ID: c42b0067-bfb5-4a33-8f9f-5f1ef2dfceb8) | Permission | Description | Access Type | Scope / Role | Role ID | | ----------------------------- | ---------------------------------------------------------------------------------------------------------------------------- | ----------- | ----------------------------- | ------------------------------------ | | CallRecord-PstnCalls.Read.All | Read all PSTN and Direct Routing call log data. | Application | CallRecord-PstnCalls.Read.All | a2611786-80b3-417e-adaa-707d4261a5f0 | | CallRecords.Read.All | Read call records for all calls and online meetings. | Application | CallRecords.Read.All | 45bbb07e-7321-4fd7-a8f6-3ff27e6a81c8 | | People.Read | Read the signed-in user's relevant people list (ranked contacts from multiple sources). | Delegated | People.Read | — | | Presence.Read.All | Read presence info for all users on behalf of signed-in user (activity, availability, status note, OOF, timezone, location). | Delegated | Presence.Read.All | — | | TeamworkActivity.Send | Send a teamwork activity (notification) to any user. | Application | TeamworkActivity.Send | a267235f-af13-44dc-8385-c1dc93023186 | | User.Read | Basic signed-in user profile. | Delegated | User.Read | — | | User.Read.All | Read full profiles of all users. | Delegated | User.Read.All | — | | User.Read.All | Read profiles of all users without a signed-in user. | Application | User.Read.All | df021288-bdef-4463-88db-98f22de89214 | | User.ReadBasic.All | Read basic profiles (name, email, photo, etc.) of all users. | Delegated | User.ReadBasic.All | — | | User.ReadBasic.All | Read basic profiles of all users without a signed-in user. | Application | User.ReadBasic.All | 97235f07-e226-4f63-ace3-39588e11d3a1 | ## Easy Call Report Admin (PROD App ID: 1825119b-4293-4a92-8a45-24ba908a24ed) | Permission | Description | Access Type | Scope / Role | Role ID | | --------------------------------------------------- | ------------------------------------------------------------------------- | ----------- | --------------------------------------------------- | ------------------------------------ | | Channel.ReadBasic.All | Read channel names & descriptions. | Delegated | Channel.ReadBasic.All | — | | Channel.ReadBasic.All | Read all channel names & descriptions across teams. | Application | Channel.ReadBasic.All | 59a6b24b-4225-4393-8165-ebaec5f55d7a | | Group.Read.All | Read all groups. | Delegated | Group.Read.All | — | | offline\_access | Allows issuing refresh tokens. | Delegated | offline\_access | — | | openid | OIDC scope for ID token. | Delegated | openid | — | | Presence.Read.All | Read presence information of all users in your organization. | Delegated | Presence.Read.All | — | | profile | Standard profile claims (name, email, etc.). | Delegated | profile | — | | Team.ReadBasic.All | Read team names & descriptions. | Delegated | Team.ReadBasic.All | — | | Team.ReadBasic.All | List all teams. | Application | Team.ReadBasic.All | 2280dda6-0bfd-44ee-a2f4-cb867cfc4c1e | | TeamsAppInstallation.ReadForTeam.All | Read installed Teams apps for all teams. | Application | TeamsAppInstallation.ReadForTeam.All | 1f615aea-6bf9-4b05-84bd-46388e138537 | | TeamsAppInstallation.ReadWriteAndConsentForTeam.All | Manage install & permission grants for Teams apps for all teams. | Application | TeamsAppInstallation.ReadWriteAndConsentForTeam.All | b0c13be0-8e20-4bc5-8c55-963c23a39ce9 | | TeamSettings.ReadWrite.All | Read and change all teams' settings. | Application | TeamSettings.ReadWrite.All | bdd80a03-d9bc-451d-b7c4-ce7c63fe3c8f | | user\_impersonation | Access Microsoft Teams and Skype for Business data as the signed in user. | Delegated | user\_impersonation | — | | User.Read | Basic signed-in user profile. | Delegated | User.Read | — | | User.Read.All | Read all users' full profiles. | Delegated | User.Read.All | — | ## Easy Calling (PROD App ID: 296d8ef4-d52f-45e0-9072-18cb81c71f89) | Permission | Description | Access Type | Scope / Role | Role ID | | ------------------------------ | ---------------------------------------------------------------------- | ----------- | ------------------------------ | ------------------------------------ | | CallEvents.Read.All | Read call event information for all users. | Application | CallEvents.Read.All | 1abb026f-7572-49f6-9ddd-ad61cbba181e | | Calls.AccessMedia.All | Direct access to media streams in a call. | Application | Calls.AccessMedia.All | a7a681dc-756e-4909-b988-f160edc6655f | | Calls.Initiate.All | Initiate 1:1 outbound calls and transfer calls. | Application | Calls.Initiate.All | 284383ee-7f6e-4e40-a2a8-e85dcb029101 | | Calls.InitiateGroupCall.All | Initiate outbound group calls and add participants. | Application | Calls.InitiateGroupCall.All | 4c277553-8a09-487b-8023-29ee378d8324 | | Calls.JoinGroupCall.All | Join group calls and scheduled meetings (as app with user privileges). | Application | Calls.JoinGroupCall.All | f6b49018-60ab-4f81-83bd-22caeabfed2d | | Calls.JoinGroupCallAsGuest.All | Join group calls and meetings anonymously (guest). | Application | Calls.JoinGroupCallAsGuest.All | fd7ccf6b-3d28-418b-9701-cd10f5cd2fd4 | | ChannelMember.Read.All | Read the members of channels (on behalf of signed-in user). | Delegated | ChannelMember.Read.All | — | | ChannelMember.Read.All | Read members of all channels (no user context). | Application | ChannelMember.Read.All | 3b55498e-47ec-484f-8136-9013221c06a9 | | Presence.Read.All | Read presence information for all users (on behalf of signed-in user). | Delegated | Presence.Read.All | — | | Presence.Read.All | Read presence info of all users (no user context). | Application | Presence.Read.All | a70e0c2d-e793-494c-94c4-118fa0a67f42 | | TeamworkActivity.Send | Send teamwork activity notifications to any user. | Application | TeamworkActivity.Send | a267235f-af13-44dc-8385-c1dc93023186 | | User.Read | Basic signed-in user profile. | Delegated | User.Read | — | | User.Read.All | Read full profiles of all users. | Delegated | User.Read.All | — | | User.Read.All | Read profiles of all users without a signed-in user. | Application | User.Read.All | df021288-bdef-4463-88db-98f22de89214 | ## Easy Calling Admin (PROD App ID: a0e65b85-69df-4711-84fc-db4ea85190a5) | Permission | Description | Access Type | Scope / Role | Role ID | | --------------------- | ------------------------------------------------------------------------- | ----------- | --------------------- | ------- | | Channel.ReadBasic.All | Read channel metadata with user context. | Delegated | Channel.ReadBasic.All | — | | Group.Read.All | Read Microsoft 365 groups across the tenant. | Delegated | Group.Read.All | — | | offline\_access | Allow Easy Calling admin to refresh access tokens. | Delegated | offline\_access | — | | openid | Enable OpenID Connect sign-in for Easy Calling admin. | Delegated | openid | — | | Presence.Read.All | Read presence for all users on behalf of the admin. | Delegated | Presence.Read.All | — | | profile | Request standard profile claims for Easy Calling admin. | Delegated | profile | — | | Team.ReadBasic.All | Read team names and descriptions (basic team metadata). | Delegated | Team.ReadBasic.All | — | | user\_impersonation | Access Microsoft Teams and Skype for Business data as the signed in user. | Delegated | user\_impersonation | — | | User.Read.All | Read full user profiles with user context. | Delegated | User.Read.All | — | ## Easy Console (PROD App ID: 267a71d8-bf35-4fbc-8fec-e60c70bcdeeb) | Permission | Description | Access Type | Scope / Role | Role ID | | ------------------ | ------------------------------------------------------------------------------------- | ----------- | ------------------ | ------- | | Chat.Create | Create chats on behalf of the signed-in user. | Delegated | Chat.Create | — | | ChatMessage.Send | Send chat messages on behalf of the signed-in user. | Delegated | ChatMessage.Send | — | | Contacts.ReadWrite | Create, read, update, and delete the signed‑in user's contacts. | Delegated | Contacts.ReadWrite | — | | Mail.Send | Send mail as users in the organization. | Delegated | Mail.Send | — | | Presence.Read | Read presence info for all users (on behalf of signed‑in user). | Delegated | Presence.Read | — | | Tasks.ReadWrite | Create, read, update, delete the signed‑in user's tasks and lists (including shared). | Delegated | Tasks.ReadWrite | — | | User.Read | Basic signed‑in user profile. | Delegated | User.Read | — | | User.Read.All | Read full profiles of all users. | Delegated | User.Read.All | — | ## Easy Directory (PROD App ID: 1a9a6a25-b2c3-4b56-85ff-4b72687073f1) | Permission | Description | Access Type | Scope / Role | Role ID | | ------------------------- | ------------------------------------------------------------------------- | ----------- | ------------------------- | ------------------------------------ | | Contacts.Read | Read all contacts in all mailboxes without a user. | Application | Contacts.Read | 089fe4d0-434a-44c5-8827-41ba8a0b17f5 | | Contacts.ReadWrite | Create, update, read, and delete the user's own contacts. | Delegated | Contacts.ReadWrite | — | | Contacts.ReadWrite.Shared | Manage contacts in shared mailboxes the user is permitted to access. | Delegated | Contacts.ReadWrite.Shared | — | | MailboxSettings.ReadWrite | Provides read/write mailbox settings access, including master categories. | Delegated | MailboxSettings.ReadWrite | — | | offline\_access | Allows issuing refresh tokens. | Delegated | offline\_access | — | | openid | Request an ID token (OIDC identity scope). | Delegated | openid | — | | Presence.Read.All | Read presence info of all users on behalf of the signed-in user. | Delegated | Presence.Read.All | — | | profile | Access standard profile claims (name, email, etc.). | Delegated | profile | — | | User.Read | Basic signed-in user profile. | Delegated | User.Read | — | | User.Read.All | Read full profiles of all users. | Delegated | User.Read.All | — | | User.Read.All | Read user profiles without a signed-in user. | Application | User.Read.All | df021288-bdef-4463-88db-98f22de89214 | ## Easy Directory Admin (PROD App ID: f1e99ba1-33ba-4dcf-825a-305546cdd084) | Permission | Description | Access Type | Scope / Role | Role ID | | ----------------- | ----------------------------------------------------------------------- | ----------- | ----------------- | ------- | | offline\_access | Allows issuing refresh tokens. | Delegated | offline\_access | — | | openid | OIDC scope for ID token. | Delegated | openid | — | | Presence.Read.All | Read presence information of all users on behalf of the signed-in user. | Delegated | Presence.Read.All | — | | profile | Standard profile claims (name, email, etc.). | Delegated | profile | — | | User.Read | Basic signed-in user profile. | Delegated | User.Read | — | | User.Read.All | Read all users' full profiles. | Delegated | User.Read.All | — | ## Easy Platform Configuration Center Admin (PROD App ID: ab075ccd-637d-41b8-b6c4-632d75ee771a) | Permission | Description | Access Type | Scope / Role | Role ID | | -------------------- | --------------------------------------------------------------------------- | ----------- | -------------------- | ------- | | Application.Read.All | Read applications and service principals on behalf of the signed-in user. | Delegated | Application.Read.All | — | | email | View users' email address (OIDC email claim). | Delegated | email | — | | offline\_access | Maintain access to data you have given it access to (issue refresh tokens). | Delegated | offline\_access | — | | openid | Sign users in (request ID token via OpenID Connect). | Delegated | openid | — | | Presence.Read.All | Read presence information of all users in your organization. | Delegated | Presence.Read.All | — | | profile | View basic profile information. | Delegated | profile | — | | User.Read | Sign in and read the signed-in user's profile. | Delegated | User.Read | — | | User.Read.All | Read full profiles of all users in the organization. | Delegated | User.Read.All | — | ## My Easy Platform (PROD App ID: fa0b142f-0e29-4aad-b4eb-0a4eb9dcd003) | Permission | Description | Access Type | Scope / Role | Role ID | | ----------------- | ------------------------------------------------------------ | ----------- | ----------------- | ------- | | email | View users' email address | Delegated | email | — | | offline\_access | Maintain access to data you have given it access to | Delegated | offline\_access | — | | openid | Sign users in | Delegated | openid | — | | Presence.Read | Read user's presence information | Delegated | Presence.Read | — | | Presence.Read.All | Read presence information of all users in your organization | Delegated | Presence.Read.All | — | | profile | View users' basic profile | Delegated | profile | — | | Tasks.ReadWrite | Create, read, update, and delete user's tasks and task lists | Delegated | Tasks.ReadWrite | — | | User.Read | Sign in and read user profile | Delegated | User.Read | — | | User.Read.All | Read all users' full profiles | Delegated | User.Read.All | — | --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.easyplatform.app/reference/permission-tables.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.