Microsoft permissions
AI summary
See the permissions each authenticator requires and which inventory objects depend on them.
Rencore Governance reads your tenant through authenticators: app registrationsApp registrationAn app registration is the global definition of an application in Microsoft Entra ID.Read more, each with its own set of permissions. Each page below lists one authenticator's permissions, whether each is an application or delegated permissionApplication and delegated permissionsApplication and delegated permissions are the two kinds of Microsoft permissions Rencore Governance asks for.Read more, the inventory objectsInventory objectAn inventory object is one item Rencore Governance has scanned from a connector, such as a single Team, SharePoint site collection, user or Power App.Read more that need it and a link to its Microsoft documentation.
All authenticators
-
6 permissions: Read activity feed, Read all usage reports and Read audit log and more.
-
1 permission: Read directory data.
-
1 permission: Access the Azure API.
-
ChatGPT Preview
14 permissions: Read ChatGPT groups, Read ChatGPT service accounts and Read ChatGPT usage limits and more.
-
Claude Preview
3 permissions: Access Claude Compliance API, Access Claude Enterprise Analytics API and Access Claude Spend Limits API.
-
4 permissions: Read all external connections, Read all usage reports and Read audit logs data from all services and…
-
8 permissions: Access the Dataverse Service API, Access the Power Platform admin API and Dataverse Permission…
-
2 permissions: Read all usage reports and Read user mailbox settings.
-
21 permissions: Get labels tenant scope, Read activity feed and Read all Viva Engage communities and more.
-
6 permissions: Read all company places, Read all groups and Read all users' full profiles and more.
-
3 permissions: Read all users' full profiles, Read file data and Read items in all site collections.
-
1 permission: Have full control of all site collections.
-
1 permission: Read all users' tasks and tasklist.
-
2 permissions: Access Azure Service Management as you (preview) and Access the PowerApps Service API.
-
1 permission: Access the Power BI content.
-
1 permission: Get labels tenant scope.
-
1 permission: Read service health.
-
1 permission: Read items in all site collections.
-
1 permission: Have full control of all site collections.
-
6 permissions: Read all app catalogs, Read all channel messages and Read all groups and more.
-
3 permissions: Read all Viva Engage communities, Read all groups and Read all usage reports.
Frequently asked questions
What does the Microsoft permissions reference list?
The Microsoft permissions Rencore Governance requests, one page per authenticator, with what each permission is used for and its Microsoft documentation.
Which entries does the Microsoft permissions reference include?
21 entries: Auditing, Entra ID, Azure, ChatGPT, Claude and 16 more.
Which entries in the Microsoft permissions reference are in preview?
ChatGPT and Claude.
Where do I start in the Microsoft permissions reference?
Pick an entry to open its own page with the full details.