| Directory.Read.All | Read directory data | Workflows and skills: Required for listing users, groups, license, domain in actions. |
| Directory.ReadWrite.All | Read and write directory data | Workflows: Required for creating users, groups through workflow actions. |
| GroupMember.ReadWrite.All | Read and write all group memberships | Workflows and skills: Required for reading information about available groups and adding or deleting users from groups |
| User.Read | Sign in and read user profile | It’s a basic permission granted by Azure by default. |
| User.ReadWrite.All | Read and write all users' full profiles | Workflows: Required for deleting users. For adding or removing licenses, either this permission or Directory.ReadWrite.All is required. |
| Channel.Create | Create channels | Workflows: Required to create a channel in teams. |
| Channel.ReadBasic.All | Read the names and descriptions of all channels | Assistant: Required for reading conversations when Assistant is configured to learn from a channel. Workflows: Either this permission or Directory.Read.All is required for posting to a channel. |
| ChannelMember.ReadWrite.All | Add and remove members from all channels | Workflows: Required for adding users to channels in teams. |
| ChannelSettings.ReadWrite.All | Read and write the names, descriptions, and settings of all channels, without a signed-in user. | ChannelSettings.ReadWrite.All enables the Assistant to learn from channels and update its knowledge graph |
| email | View users' email address | It’s a basic permission granted by Azure by default. |
| Team.ReadBasic.All | Get a list of all teams | Workflows: Required to list teams in actions |
| TeamMember.ReadWrite.All | Add and remove members from all teams | Workflows: Required for adding members to teams. |
| TeamsAppInstallation.ReadForChat.All | Read installed Teams apps for all chats | TeamsAppInstallation.ReadForChat.All enables the Assistant to learn from channels and update its knowledge graph |
TeamsAppInstallation.ReadForTeam.All
| Read installed Teams apps for all teams | TeamsAppInstallation.ReadForTeam.All enables the Assistant to learn from channels and update its knowledge graph |
| TeamSettings.Read.All | Read all teams' settings | Workflows: Required to list teams in actions. |
| TeamSettings.ReadWrite.All | Read and change all teams' settings | Workflows: Required to list teams in actions |
| Teamwork.Migrate.All | Allows the app to create chat and channel messages, without a signed in user. The app specifies which user appears as the sender, and can backdate the message to appear as if it was sent long ago. The messages can be sent to any chat or channel in the organization. | Optional permission |
| User-LifeCycleInfo.Read.All | Read all users' lifecycle information | Optional permission |
| User.Read.All | Read all users' full profiles | Workflows and sync: Required for listing and getting user information. Either this or Directory.Read.All is required |
| user_impersonation | Create and access protected content for users | Workflows and requests: Required for sending replies as the agent to an employee request and for sending DMs/posting to channels on behalf of any employee |
| ChannelMessage.Read.All | Read all channel messages | Enables the Assistant to learn from channels and update its knowledge graph |
| Teams.ManageChats | Manage chats in Teams | Workflows: Required to perform actions such as sending, updating, or deleting messages within Microsoft Teams |
