Permissions
Meeting Canary Agent requires the following application permissions allow the Meeting Canary Agent to subscribe to users’ calendars, automatically install the Meeting Canary App and also track when participants come and leave a meeting even when Meeting Canary is not present.
| Permissions | Purpose |
|---|---|
| User.Read.All | List all users in a tenant. |
| Calendars.Read | Subscribe to user calendar events |
| Calls.Initiate.All | List current participants in a call. |
| CallRecords.Read.All | Read all call records. |
| Chat.ReadBasic.All | Check if app is installed. |
| OnlineMeetings.Read.All | Subscribe to Meeting Event Notifications |
| TeamsAppInstallation.ReadWriteAndConsentForUser.All | Install app RSC permissions for a user |
| TeamsAppInstallation.ReadWriteAndConsentForChat.All | Install app RSC permissions in a chat. |
| TeamsAppInstallation.ReadWriteAndConsentForTeam.All | Install app RSC permissions in a channel. |
| TeamsTab.ReadWriteForChat.All | Add the Meeting Canary tab to the chat. |
| TeamsTab.ReadWriteForTeam.All | Add the Meeting Canary tab to the channel. |
Learn about Azure AD Microsoft Graph Permissions
Granting Meeting Canary Agent permissions
When approving permissions for your organization you will be presented with a dialogue similar to this:
Please refer to the Microsoft Graph Permissions reference for full details on what permissions scopes grants access to what.
To grant permission you must be a Global Administrator or Privileged Role Administrator. For details see Grant tenant-wide admin consent to an application