App permissions for Seamless
The following tables outline the necessary permissions for Seamless to interact with Microsoft Graph and related services. These permissions ensure the application can perform essential tasks like managing groups, accessing user profiles, and maintaining secure sign-in processes. All permissions require admin consent and are categorized as either Application or Delegated permissions, depending on the level of access needed.
Admin center permissions
| Permission | Description | Type |
|---|---|---|
| AuditLog.Read.All | Read audit log data | Delegated |
| AuditLog.Read.All | Read all audit log data | Application |
| View users' email address | Delegated | |
| Group.Read.All | Read all groups | Delegated |
| Group.ReadWrite.All | Read and write all groups | Application |
| offline_access | Maintain access to data you have given it access to | Delegated |
| openid | Sign users in | Delegated |
| profile | View users' basic profile | Delegated |
| User.Read | Sign in and read user profile | Delegated |
| User.Read.All | Read all users' full profiles | Application |
| User.Read.All | Read all users' full profiles | Delegated |
Teams app permissions
| Permission | Description | Type |
|---|---|---|
| AuditLog.Read.All | Read audit log data | Application |
| Group.Read.All | Read all groups | Delegated |
| Group.ReadWrite.All | Read and write all groups | Delegated |
| Group.ReadWrite.All | Read and write all groups | Application |
| Notes.Read.All | Read all OneNote notebooks that user can access | Delegated |
| Sites.Read.All | Read items in all site collections | Delegated |
| Team.ReadBasic.All | Read the names and descriptions of teams | Delegated |
| TeamMember.ReadWrite.All | Add and remove members from teams | Delegated |
| TeamMember.ReadWriteNonOwnerRole.All | Add and remove members with non-owner role for all teams | Application |
| User.Invite.All | Invite guest users to the organization | Delegated |
| User.Read | Sign in and read user profile | Delegated |
| User.Read.All | Read all users' full profiles | Delegated |
| User.ReadWrite.All | Read and write all users' full profiles | Application |