eG Tests Requiring Microsoft Graph App Permissions

Some tests that the eG agent runs require that a Microsoft Graph App be registered with Microsoft Entra ID, with the following permissions. Note that the tests below will not run without the specified permissions.

A. Microsoft Graph API - Application Permissions

Permission	Purpose	Test	Component
Calendars.ReadWrite	Allows app to read and write calendars in all mailboxes	Calendar Event Operations	Microsoft Exchange Online
Reports.Read.All	Allows app to read all usage reports	Groups Activity License Details By User Office 365 Groups Activity Details Users By Service	Microsoft Office 365
		Email Activity Week Summary Mailbox Statistics User Connections by Email App User Mails and Mailboxes Users Users by Outlook Versions	Microsoft Exchange Online
		SharePoint Online Users SharePoint User Activity Site Collection Health Checks Site Usage Summary	Microsoft SharePoint Online
		Teams Inventory Teams Device Usage Teams User Activities Teams User Details	Microsoft Teams
		File Activities Summary OneDrive Files OneDrive Sites Usage OneDrive User Details OneDrive Users	Microsoft OneDrive for Business
		Messages in Groups User Yammer Activity Yammer Activity Summary Yammer Groups Yammer Users By Activity Yammer Users By Device Yammer Users Summary	Microsoft Yammer
ServiceHealth.Read.All	Allows app to read service health	O365 Service Health	Microsoft Office 365
		Exchange Service Health	Microsoft Exchange Online
		SharePoint Service Health	Microsoft SharePoint Online
		Teams Service Health	Microsoft Teams
		OneDrive Service Health	Microsoft OneDrive for Business
		Yammer Service Health	Microsoft Yammer
ServiceMessage.Read.All	Allows app to read service messages	O365 Message Center Communications	Microsoft Office 365
		Exchange Message Center Communications	Microsoft Exchange Online
		SharePoint Message Center Communications	Microsoft SharePoint Online
		Teams Message Center Communications	Microsoft Teams
		OneDrive Message Center Communications	Microsoft OneDrive for Business
		Yammer Message Center Communications	Microsoft Yammer
User.Read.All	Allows app to read the full profile of all users	O365 Users Details	Microsoft Office 365
Mail.ReadWrite	Allows app to read and write mail in all mailboxes	Mail Flow	Microsoft Exchange Online
Mail.Send	Allows app to send mail as any user	Mail Flow	Microsoft Exchange Online
Sites.FullControl.All	Allows the application to have full control of all site collections on behalf of the signed-in user.	SharePoint File Operations Site Collections Tenant Storage Site Collection Health Checks Site Usage Summary	Microsoft SharePoint Online
Sites.FullControl.All		OneDrive Site Connectivity OneDrive File Operations OneDrive Sites Usage	Microsoft OneDrive for Business

B. Microsoft Graph API - Delegated Permissions

Permission	Purpose	Test	Component
Channel.Create	Allows app to create channels	Channel Operations	Microsoft Teams
ChannelMember.ReadWrite.All	Allows app to add and remove channel members
ChannelMessage.Read.All	Allows app to read user channel messages
ChannelMessage.Send	Allows app to send channel messages
ChannelSettings.ReadWrite.All	Allows app to read and write the names, descriptions, and settings of all channels, on behalf of the signed-in user.
Chat.Create	Allows app to create chats	Chat Operations	Microsoft Teams
Chat.ReadWrite	Allows app to read and write user chat messages
ChatMember.ReadWrite	Allows app to add and remove chat members
ChatMessage.Send	Allows app to send user chat messages
Directory.ReadWrite.All	Allows app to read and write data in your organization's directory, such as users, and groups	Channel Operations Chat Operations Team Operations Teams Inventory	Microsoft Teams
Team.Create	Allows app to create teams	Team Operations	Microsoft Teams
TeamMember.ReadWrite.All	Allows app to add and remove members from teams, on behalf of the signed-in user.
TeamSettings.ReadWrite.All	Allows app to read and change all teams' settings, on behalf of the signed-in user.
CallRecords.Read.All	Allows the app to read call records for all calls and online meetings without a signed-in user	Audio Performance - RT Calls Overview - RT Network Quality - RT User Feedback - RT VBSS Performance - RT Video Performance - RT	Microsoft Teams

C. Microsoft Yammer API - Delegated Permissions

Permission

Purpose

Test

Component

user_impersonation

Allows app to read/write to the Yammer platform

Yammer Logon Status
Yammer Operations

Microsoft Yammer