Permissions

Easy Calling requires three separate app registrations within your tenant to ensure functionality and security:

1. Easy Calling: This primary app handles the core functionalities, enabling the display of your call directly within Microsoft Teams.

2. Easy Calling Configuration: To enhance security, a second app registration with elevated permissions is used to change the users configuration

3. Easy Platform Configuration Center: To enhance security, a third app registration with elevated permissions is used for configuration tasks.

Easy Calling

Permission	Description	Type
ChannelMember.Read.All	Read the members of channels (on behalf of signed-in user).	Delegated
Presence.Read.All	Read presence information for all users (on behalf of signed-in user).	Delegated
User.Read	Basic signed-in user profile.	Delegated
User.Read.All	Read full profiles of all users.	Delegated
CallEvents.Read.All	Read call event information for all users.	Application
Calls.AccessMedia.All	Direct access to media streams in a call.	Application
Calls.Initiate.All	Initiate 1:1 outbound calls and transfer calls.	Application
Calls.InitiateGroupCall.All	Initiate outbound group calls and add participants.	Application
Calls.JoinGroupCall.All	Join group calls and scheduled meetings (as app with user privileges).	Application
Calls.JoinGroupCallAsGuest.All	Join group calls and meetings anonymously (guest).	Application
ChannelMember.Read.All	Read members of all channels (no user context).	Application
Presence.Read.All	Read presence info of all users (no user context).	Application
TeamworkActivity.Send	Send teamwork activity notifications to any user.	Application
User.Read.All	Read profiles of all users without a signed-in user.	Application

Optional features

Permission	Description	Type
Tasks.ReadWrite	Planner integration Sync Easy Calling activities with Microsoft Planner when enabled.	Delegated
Tasks.ReadWrite	Personal tasks Allow agents to manage personal tasks from Easy Calling.	Delegated
Contacts.ReadWrite	Personal contacts Allow agents to access and update personal contacts.	Delegated
Mail.Send	Send mail from Easy Calling Send emails directly from Easy Calling conversations.	Delegated
Chat.Create, ChatMessage.Send	Send chat from Easy Calling Send Teams chat messages directly from Easy Calling conversations.	Delegated
Contacts.Read (Application) — on Easy Contact Sync	Shared mailbox search Search and display contacts from a shared mailbox.	Application

Easy Calling Configuration

Permission	Description	Type
Team.ReadBasic.All	Read team names and descriptions (basic team metadata).	Delegated
Channel.ReadBasic.All	Read channel metadata with user context.	Delegated
Group.Read.All	Read Microsoft 365 groups across the tenant.	Delegated
Presence.Read.All	Read presence for all users on behalf of the admin.	Delegated
User.Read.All	Read full user profiles with user context.	Delegated
offline_access	Allow Easy Calling admin to refresh access tokens.	Delegated
openid	Enable OpenID Connect sign-in for Easy Calling admin.	Delegated
profile	Request standard profile claims for Easy Calling admin.	Delegated
user_impersonation	Access Microsoft Teams and Skype for Business data as the signed in user.	Delegated

Easy Platform Configuration Portal App

Permission	Description	Type
Application.Read.All	Read applications and service principals on behalf of the signed-in user.	Delegated
Presence.Read.All	Read presence information of all users in your organization.	Delegated
email	View users' email address (OIDC email claim).	Delegated
offline_access	Maintain access to data you have given it access to (issue refresh tokens).	Delegated
openid	Sign users in (request ID token via OpenID Connect).	Delegated
profile	View basic profile information.	Delegated
User.Read	Sign in and read the signed-in user's profile.	Delegated
User.Read.All	Read full profiles of all users in the organization.	Delegated

Optional features

Permission	Description	Type
CrossTenantInformation.ReadBasic.All	Reseller tenant name resolution Show customer tenant display names (instead of only tenant IDs) in reseller subscriptions.	Delegated