Alphabetic Connector List > Microsoft 365 > Prerequisites

In order to use this connector, the following application permissions must be configured for the app registration in Microsoft Entra ID. These are the minimum required permissions following the principle of least privilege:

Permission	Necessity	Description
AuditLog.Read.All	mandatory	Read all audit log data. Sign-in activity and audit events for the Microsoft 365 organization will be extracted.
CallRecords.Read.All	mandatory	Read all call records. Teams call and meeting records will be extracted.
Organization.Read.All	mandatory	Read organization information. Tenant details and subscription information will be extracted.
Reports.Read.All	mandatory	Read all usage reports. Extracted reports are service usage reports for Microsoft 365.
User.Read.All	mandatory	Read all user profiles. Basic user data (name, mail, user principal name, etc.) and subscription details will be extracted.

These permissions must be configured as application permissions (not delegated permissions) in the app registration. Application permissions allow the connector to run without a signed-in user context.

API Permissions

API Permissions