Permissions

On the following page you see an overview of the required permissions.

Easy Call Report requires two separate app registrations within your tenant to ensure functionality and security:

  1. Easy Call Report: This primary app handles the core functionalities, enabling the display of your contacts directly within Microsoft Teams.

  2. Easy Call Report Configuration: To enhance security, a second app registration with elevated permissions is used to change the users configuration

  3. Easy Platform Configuration Center: To enhance security, a third app registration with elevated permissions is used for configuration tasks. This app allows:

    • Access to auto attandants and call queues

    • The provision of a dedicated portal for managing auto attandants and call queues.

Access to the Easy Platform Configuration Portal is restricted to users assigned the Teams Administrator role, ensuring that only authorized personnel can manage the platform’s configuration and permissions.

This two-app approach guarantees both robust functionality and a secure management environment for Easy Directory.

Easy Call Report App

Permission
Description
Type

User.ReadBasic.All

Allows the app to read a basic set of profile properties of other users in your organization without a signed-in user. Includes display name, first and last name, email address, open extensions, and photo.

Application

TeamsActivity.Send

Allows the app to create new notifications in users' teamwork activity feeds without a signed in user. These notifications may not be discoverable or be held or governed by compliance policies.

Application

CallRecords.Read.All

Allows the app to read call records for all calls and online meetings without a signed-in user.

Application

CallRecord-PstnCalls.Read.All

Allows the app to read all PSTN and direct routing call log data without a signed-in user.

Application

User.Read.All

Allows the app to read user profiles without a signed in user.

Application

People.Read

Allows the app to read a ranked list of relevant people of the signed-in user. The list includes local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).

Delegated

Presence.Read.All

Allows the app to read presence information of all users in the directory on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.

Delegated

User.Read

Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.

Delegated

User.Read.All

Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user.

Delegated

User.ReadBasic.All

Allows the app to read a basic set of profile properties of other users in your organization on behalf of the signed-in user. This includes display name, first and last name, email address and photo.

Delegated

Easy Call Report Configuration

Permission
Description
Type

TeamSettings.ReadWrite.All

Read and change all teams' settings, without a signed-in user.

Application

Channel.ReadBasic.All

Read all channel names and channel descriptions, without a signed-in user.

Application

Team.ReadBasic.All

Get a list of all teams, without a signed-in user.

Application

TeamsAppInstallation.ReadWriteAndConsentForTeam.All

Allows the app to read, install, upgrade, and uninstall Teams apps in any team, without a signed-in user. Gives the ability to manage permission grants for accessing those specific teams' data.

Application

TeamsAppInstallation.ReadForTeam.All

Allows the app to read the Teams apps that are installed in any team, without a signed-in user. Does not give the ability to read application-specific settings.

Application

Group.Read.All

Allows the app to list groups, and to read their properties and all group memberships on behalf of the signed-in user. Also allows the app to read calendar, conversations, files, and other group content for all groups the signed-in user can access.

Delegated

offline_access

Allows the app to see and update the data you gave it access to, even when users are not currently using the app. This does not give the app any additional permissions.

Delegated

openid

Allows users to sign in to the app with their work or school accounts and allows the app to see basic user profile information.

Delegated

profile

Allows the app to see your users' basic profile (e.g., name, picture, user name, email address)

Delegated

Team.ReadBasic.All

Read the names and descriptions of teams, on behalf of the signed-in user.

Delegated

User.Read

Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.

Delegated

Channel.ReadBasic.All

Read channel names and channel descriptions, on behalf of the signed-in user.

Delegated

user_impersonation

Access Microsoft Teams and Skype for Business data based on the user's role membership

Delegated

Easy Platform Configuration Portal App

Permission
Description
Type

User.Read

Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.

Delegated

Application.Read.All

Allows the app to read applications and service principals on behalf of the signed-in user.

Delegated

openid

Allows users to sign in to the app with their work or school accounts and allows the app to see basic user profile information.

Delegated

profile

Allows the app to see your users' basic profile (e.g., name, picture, user name, email address)

Delegated

offline_access

Allows the app to see and update the data you gave it access to, even when users are not currently using the app. This does not give the app any additional permissions.

Delegated

Last updated

Was this helpful?