Microsoft 365 permissions
AI summary
Rencore Governance requests Microsoft 365 permissions to read data on groups, users, places, domains, organizations, and directory roles. The page shows what each permission allows and which inventory objects depend on each one, with links to Microsoft documentation.
The permissions Rencore Governance requests through the Microsoft 365Microsoft 365Microsoft 365 is the Microsoft cloud suite of Teams, SharePoint, OneDrive, Exchange and the Office apps.Read more authenticator, and the inventory objectsInventory objectAn inventory object is one item Rencore Governance has scanned from a connector, such as a single Team, SharePoint site collection, user or Power App.Read more that rely on each one. Each permission links to its Microsoft documentation.
See Microsoft permissions for every authenticator, and Required permissions for how consent works.
Permissions
| Permission | Description | Type | Used by |
|---|---|---|---|
Read all company places Place.Read.All | Allows the app to read company places (conference rooms and room lists) for calendar events and other applications. | Application | Rooms & equipment |
Read all groups Group.Read.All | Allows the app to read memberships for all groups without a signed-in user. Also allows the app to read calendar, conversations, files, and other group content for all groups. | Application | Deleted group , Group , GroupMemberEntity , GroupOwnerEntity , GroupToGroupRelationEntity , Deleted team , Channel , TeamsChannelMemberEntity , Team , TeamsInstalledAppRelationEntity , TeamsMemberEntity , TeamsOwnerEntity , Tab , VivaEngageCommunityMemberEntity , VivaEngageCommunityOwnerEntity , Community |
Read all users' full profiles User.Read.All | Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user. | Application | Deleted user , User , TeamsMemberEntity , TeamsOwnerEntity |
Read domains Domain.Read.All | Allows the app to read all domain properties without a signed-in user. | Application | Domain |
Read organization information Organization.Read.All | Allows the app to read the organization and related resources, without a signed-in user. Related resources include things like subscribed SKUs and tenant branding information. | Application | Subscription , Service assignment , App , UserLicenseEntity , UserServicePlanEntity |
Read role management data for Entra IDMicrosoft Entra IDMicrosoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant.Read more RoleManagement.Read.Directory | Allows the app to read the role-based access controlRoles and teamsRoles and teams control what each user can do and see in a Workspace. Each user is assigned a role, which grants permissions, and a team, which grants access to inventory objects.Read more (RBAC) settings for your company's directory, on behalf of the signed-in user. This includes reading directory roleDirectory roleA directory role is a Microsoft Entra admin role, such as Global Administrator or Teams Administrator, that grants a set of permissions across the tenant.Read more templates, directory roles and memberships. | Application | Directory role |
Frequently asked questions
Which permissions does the Microsoft 365 authenticator request?
Which permissions does the Microsoft 365 authenticator request?6 permissions: Read all company places, Read all groups, Read all users' full profiles, Read domains and 2 more.
What are the Microsoft names of the Microsoft 365 permissions?
What are the Microsoft names of the Microsoft 365 permissions?Place.Read.All, Group.Read.All, User.Read.All, Domain.Read.All, Organization.Read.All and RoleManagement.Read.Directory.
Are the Microsoft 365 permissions application or delegated permissions?
Are the Microsoft 365 permissions application or delegated permissions?All 6 permissions are application permissions.
Which inventories need the Microsoft 365 permissions?
Which inventories need the Microsoft 365 permissions?The inventories of Microsoft 365, Teams, Viva Engage and Entra ID.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?