O365 Permissions

Inforiver must obtain a set of permissions through the Azure AD App to function properly. The following are the required and optional permissions requested, with details on how and which feature will use them.

Required permissions

1. Microsoft Graph

Permission	Description	Features Dependent	Actions done from App
profile	Retrieves user profile information.	User	Get profile information with Full Name, Display Name, Email, Company Name.
email	Access to user email addresses.	User	Access user profile Information, Authentication.
openid	Enables OpenID Connect authentication.	Authentication	Authenticate your user.
User.Read	Signs in and reads user profile	User	Sign in and read user profile.
User.ReadBasic.All	Reads all users' basic profile information.	User	Get all users' profile information with Full Name, Display Name, Email, Company Name.
Group.Read.All	Reads all groups' information. Requires admin consent.	User, Groups and ACL	Authenticate from O365 Group and authorize user for different actions via Groups.
GroupMember.Read.All	Reads Group Membership Details. Requires admin consent.	Groups	Disintegrate groups into its members to get the list of members from the group.

2. Power BI service

Permission	Description	Features Dependent	Actions done from App
Dataset.Read.All	Read access to all Power BI datasets.	Data Lineage and Subscription	Create semantic model-based dropdown lists, fetch primary key column values when using key column mapping feature in writeback, refresh dataset function in semantic model-based dropdown lists and subscriptions.
Report.Read.All	Read access to all Power BI Reports.	Data Lineage and Subscription	Get more information about the report in which the Inforiver visual is used.
Workspace.Read.All	Read access to all Power BI workspaces.	Data Lineage and Subscription	Get more information about the workspace in which the Inforiver visual is used.
App.Read.All	View all Power BI apps the user has access to.	Subscription	Access Power BI apps that may contain reports or dashboards to schedule them for subscription.
Dashboard.Read.All	View all dashboards in the organization.	Subscription	Access dashboard reports that can be scheduled for subscription.

Optional permissions

1. Microsoft Graph

Permission	Description	Features Dependent	Actions done from App
Files.ReadWrite.All	Access to all files the user can access in OneDrive.	Writeback and Subscription	Writeback and export the report from Subscription to OneDrive folder.
Sites.ReadWrite.All	Access to SharePoint sites. Edit or delete items in all site collections.	Writeback and Subscription	Writeback and export the report from Subscription to SharePoint folder.
Channel.ReadBasic.All	Reads the names and descriptions of Teams channels the user has access to.	Subscription	To track available Teams channels while scheduling subscriptions.
Teams.ReadBasic.All	Read basic information about all Microsoft Teams in an organization.	Subscription	To track available Teams while scheduling subscriptions to Teams.

2. Power BI service

Permission	Description	Features Dependent	Actions done from App
Dataflow.Read.All	Read access to all Power BI dataflows.	Data Lineage	Create semantic model-based dropdown lists, fetch primary key column values when using key column mapping feature in writeback, refresh dataset function in semantic model-based dropdown lists and subscriptions.
Dataset.ReadWrite.All	Access to all Power BI datasets. Read and write datasets when required.	Subscription	Refresh the dataset when it is required.
Lakehouse.ReadWrite.All	Access to Lakehouse destination. Read and write datasets in Lakehouse.	Writeback	Access Lakehouse destination for writeback.
Warehouse.Read.All	Access to PowerBI data warehouses. Fetches the connection string for the given workspace and WarehouseID.	Adding OneLake as source in Infobridge	Get the connection string for the given workspace and warehouseID. The retrieved connection string is used to access the schema and tables present in the warehouse.

3. Azure Storage

Permission	Description	Features Dependent	Actions done from App
user_impersonation	Access to Azure storage when you want to writeback to these destinations: Dataverse, Databricks, ADLSGen2, and Fabric Lakehouse (on Azure storage).	Writeback	Access Azure Storage to support writeback to these specified destinations.