# Permissions

Easy Calling requires three separate app registrations within your tenant to ensure functionality and security:

1. **Easy Calling:** This primary app handles the core functionalities, enabling the display of your call directly within Microsoft Teams.
2. **Easy Calling Configuration**: To enhance security, a second app registration with elevated permissions is used to change the users configuration
3. **Easy Platform Configuration Center**: To enhance security, a third app registration with elevated permissions is used for configuration tasks.

## Easy Calling

<table><thead><tr><th width="170">Permission</th><th width="485">Description</th><th width="94">Type<select><option value="LBoB86I6aHG2" label="Application" color="blue"></option><option value="IzcIhKz6t57U" label="Delegated" color="blue"></option></select></th></tr></thead><tbody><tr><td>Calls.JoinGroupCall.All</td><td>Allows the app to join group calls and scheduled meetings in your organization, without a signed-in user. The app will be joined with the privileges of a directory user to meetings in your organization.</td><td><span data-option="LBoB86I6aHG2">Application</span></td></tr><tr><td>Presence.Read.All</td><td>Allows the app to read presence information of all users in the directory without a signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.</td><td><span data-option="LBoB86I6aHG2">Application</span></td></tr><tr><td>Calls.InitiateGroupCall.All</td><td>Allows the app to place outbound calls to multiple users and add participants to meetings in your organization, without a signed-in user.</td><td><span data-option="LBoB86I6aHG2">Application</span></td></tr><tr><td>TeamsActivity.Send</td><td>Allows the app to create new notifications in users' teamwork activity feeds without a signed in user. These notifications may not be discoverable or be held or governed by compliance policies.</td><td><span data-option="LBoB86I6aHG2">Application</span></td></tr><tr><td>Calls.JoinGroupCallAsGuest.All</td><td>Allows the app to anonymously join group calls and scheduled meetings in your organization, without a signed-in user. The app will be joined as a guest to meetings in your organization.</td><td><span data-option="LBoB86I6aHG2">Application</span></td></tr><tr><td>CallEvents.Read.All</td><td>Allows the app to read call event information for all users in your organization, without a signed-in user.</td><td><span data-option="LBoB86I6aHG2">Application</span></td></tr><tr><td>User.Read.All</td><td>Allows the app to read user profiles without a signed in user.</td><td><span data-option="LBoB86I6aHG2">Application</span></td></tr><tr><td>ChannelMember.Read.All</td><td>Read the members of all channels, without a signed-in user.</td><td><span data-option="LBoB86I6aHG2">Application</span></td></tr><tr><td>Calls.AccessMedia.All</td><td>Allows the app to get direct access to media streams in a call, without a signed-in user.</td><td><span data-option="LBoB86I6aHG2">Application</span></td></tr><tr><td>Calls.Initiate.All</td><td>Allows the app to place outbound calls to a single user and transfer calls to users in your organization’s directory, without a signed-in user.</td><td><span data-option="LBoB86I6aHG2">Application</span></td></tr><tr><td>ChannelMember.Read.All</td><td>Read the members of channels, on behalf of the signed-in user.</td><td><span data-option="IzcIhKz6t57U">Delegated</span></td></tr><tr><td>Contacts.ReadWrite</td><td>Allows the app to create, read, update, and delete user contacts.</td><td><span data-option="IzcIhKz6t57U">Delegated</span></td></tr><tr><td>Mail.Send</td><td>Allows the app to send mail as users in the organization.</td><td><span data-option="IzcIhKz6t57U">Delegated</span></td></tr><tr><td>Presence.Read.All</td><td>Allows the app to read presence information of all users in the directory on behalf of the signed-in user. Presence information includes activity, availability, status note, calendar out-of-office message, timezone and location.</td><td><span data-option="IzcIhKz6t57U">Delegated</span></td></tr><tr><td>Tasks.ReadWrite</td><td>Allows the app to create, read, update, and delete the signed-in user's tasks and task lists, including any shared with the user.</td><td><span data-option="IzcIhKz6t57U">Delegated</span></td></tr><tr><td>User.Read</td><td>Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.</td><td><span data-option="IzcIhKz6t57U">Delegated</span></td></tr><tr><td>User.Read.All</td><td>Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user.</td><td><span data-option="IzcIhKz6t57U">Delegated</span></td></tr><tr><td>Tasks.Read</td><td>Allows the app to read the signed-in user’s tasks and task lists, including any shared with the user. Doesn't include permission to create, delete, or update anything.</td><td><span data-option="IzcIhKz6t57U">Delegated</span></td></tr><tr><td>openid</td><td>Allows users to sign in to the app with their work or school accounts and allows the app to see basic user profile information.</td><td><span data-option="IzcIhKz6t57U">Delegated</span></td></tr><tr><td>profile</td><td>Allows the app to see your users' basic profile (e.g., name, picture, user name, email address)</td><td><span data-option="IzcIhKz6t57U">Delegated</span></td></tr><tr><td>offline_access</td><td>Allows the app to see and update the data you gave it access to, even when users are not currently using the app. This does not give the app any additional permissions.</td><td><span data-option="IzcIhKz6t57U">Delegated</span></td></tr></tbody></table>

## Easy Calling Configuration

<table><thead><tr><th width="133">Permission</th><th width="513">Description</th><th>Type<select><option value="KAgyRaBh5tiE" label="Delegated" color="blue"></option><option value="qhbolpUPTjUo" label="Application" color="blue"></option></select></th></tr></thead><tbody><tr><td>Channel.ReadBasic.All</td><td>Read all channel names and channel descriptions, without a signed-in user.</td><td><span data-option="qhbolpUPTjUo">Application</span></td></tr><tr><td>Team.ReadBasic.All</td><td>Read the names and descriptions of teams, on behalf of the signed-in user.</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>User.Read</td><td>Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>openid</td><td>Allows users to sign in to the app with their work or school accounts and allows the app to see basic user profile information.</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>profile</td><td>Allows the app to see your users' basic profile (e.g., name, picture, user name, email address)</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>offline_access</td><td>Allows the app to see and update the data you gave it access to, even when users are not currently using the app. This does not give the app any additional permissions</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>Group.Read.All</td><td>Allows the app to list groups, and to read their properties and all group memberships on behalf of the signed-in user. Also allows the app to read calendar, conversations, files, and other group content for all groups the signed-in user can access.</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>User.Read.All</td><td>Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user.</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>User.ReadBasic.All</td><td>Allows the app to read a basic set of profile properties of other users in your organization on behalf of the signed-in user. This includes display name, first and last name, email address and photo.</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>Channel.ReadBasic.All</td><td>Read channel names and channel descriptions, on behalf of the signed-in user.</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>Tasks.ReadWrite</td><td>Allows the app to create, read, update, and delete the signed-in user's tasks and task lists, including any shared with the user.</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>user_impersonation</td><td>Access Microsoft Teams and Skype for Business data based on the user's role membership</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr></tbody></table>

## Easy Platform Configuration Portal App

<table><thead><tr><th width="133">Permission</th><th width="513">Description</th><th>Type<select><option value="KAgyRaBh5tiE" label="Delegated" color="blue"></option></select></th></tr></thead><tbody><tr><td>User.Read</td><td>Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>Application.Read.All</td><td>Allows the app to read applications and service principals on behalf of the signed-in user.</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>openid</td><td>Allows users to sign in to the app with their work or school accounts and allows the app to see basic user profile information.</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>profile</td><td>Allows the app to see your users' basic profile (e.g., name, picture, user name, email address)</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr><tr><td>offline_access</td><td>Allows the app to see and update the data you gave it access to, even when users are not currently using the app. This does not give the app any additional permissions.</td><td><span data-option="KAgyRaBh5tiE">Delegated</span></td></tr></tbody></table>