Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

For this we will only need the flowing permissions (and a separate app will be step up like this):

...

AGI Deployment options:

Application-Level (Tenant) Deployments

We offer two application-level deployments. Application-level deployments are tenant-wide and apply to every user in the tenant unless configured otherwise after the product is installed.

AGAT CASB API - AGI for Meetings

This application retrieves meeting recordings and transcriptions from users' OneDrive drives.

This application does not apply to chat and channel messages.

API/Permissions Name

Type

Dsecription

Admin Consent required

Explanation

Microsoft Graph

CallRecords.Read.All

Application

Read all call records

Yes

Allows the app to read call records for all calls and online meetings without a signed-in user.

TeamsTab.Read.All

Application

Read tabs in Microsoft Teams.

Yes

Read the names and settings of tabs inside any team in Microsoft Teams, without a signed-in user. This does not give access to the content inside the tabs.

TeamsTab.ReadWrite.All

Application

Read and write tabs in Microsoft Teams.

Yes

Read and write tabs in any team in Microsoft Teams, without a signed-in user. This does not give access to the content inside the tabs.

TeamsTab.ReadWriteForChat.All

Application

Allow the Teams app to manage all tabs for all chats

Yes

Allows a Teams app to read, install, upgrade, and uninstall all tabs for any chat, without a signed-in user.

TeamsTab.ReadWriteSelfForChat.All

Application

Allow the Teams app to manage only its own tabs for all chats

Yes

Allows a Teams app to read, install, upgrade, and uninstall its own tabs for any chat, without a signed-in user.

User.Read

Delegated

Sign in and read user profile

No

Allows you to sign in to the app with your organizational account and let the app read your profile. It also allows the app to read basic company information.

User.Read.All

Application

Read all users' full profiles

Yes

Allows the app to read user profiles without a signed in user.

SharePoint

Sites.Read.All

Application

Read items in all site collections

Yes

Allows the app to read documents and list items in all site collections without a signed in user.

AGAT CASB API - AGI for Meetings + Chat

This application retrieves meeting recordings and transcriptions from users' OneDrive drives and chat and channel messages.

It can also send notifications when it has user credentials and create an insights tab in meeting chats.

API/Permissions Name

Type

Dsecription

Admin Consent required

Explanation

Microsoft Graph

CallRecords.Read.All

Application

Read all call records

Yes

Allows the app to read call records for all calls and online meetings without a signed-in user.

ChannelMessage.Read.All

Application

Read all channel messages

Yes

Allows the app to read all channel messages in Microsoft Teams

Chat.Create

Application

Create chats

Yes

Allows the app to create chats without a signed-in user.

Chat.ReadBasic.All

Application

Read names and members of all chat threads

Yes

Read names and members of all one-to-one and group chats in Microsoft Teams, without a signed-in user.

Chat.ReadWrite.All

Application

Read and write all chat messages

Yes

Allows an app to read and write all chat messages in Microsoft Teams, without a signed-in user.

ChatMessage.Read.All

Application

Read all chat messages

Yes

Allows the app to read all one-to-one and group chats messages in Microsoft Teams, without a signed-in user.

Group.Read.All

Application

Read all groups

Yes

Allows the app to read group properties and memberships, and readĀ conversations for all groups, without a signed-in user.

TeamsTab.Read.All

Application

Read tabs in Microsoft Teams.

Yes

Read the names and settings of tabs inside any team in Microsoft Teams, without a signed-in user. This does not give access to the content inside the tabs.

TeamsTab.ReadWrite.All

Application

Read and write tabs in Microsoft Teams.

Yes

Read and write tabs in any team in Microsoft Teams, without a signed-in user. This does not give access to the content inside the tabs.

TeamsTab.ReadWriteForChat.All

Application

Allow the Teams app to manage all tabs for all chats

Yes

Allows a Teams app to read, install, upgrade, and uninstall all tabs for any chat, without a signed-in user.

TeamsTab.ReadWriteSelfForChat.All

Application

Allow the Teams app to manage only its own tabs for all chats

Yes

Allows a Teams app to read, install, upgrade, and uninstall its own tabs for any chat, without a signed-in user.

User.Read

Delegated

Sign in and read user profile

No

Allows you to sign in to the app with your organizational account and let the app read your profile. It also allows the app to read basic company information.

User.Read.All

Application

Read all users' full profiles

Yes

Allows the app to read user profiles without a signed in user.

SharePoint

Sites.Read.All

Application

Read items in all site collections

Yes

Allows the app to read documents and list items in all site collections without a signed in user.

Protocol used by Azure app for authentication

...