API Permissions for MS Graph

This topic lists the API permissions required in the Microsoft Azure app for MS Graph email.

Table 1. Client Credentials (Client Secret)
API/Permission Name	Type	Description	Admin consent required	Purpose
Microsoft Graph (4)
Mail.ReadWrite	Application	Read and write mail in all mailboxes	Yes	Voice Server (VS) reads and deletes e-mail for the specified inbox.
Mail.Send	Application	Send mail as any user	Yes	Send e-mail from VS.
Files.ReadWrite.All	Application	Read and write files in all site collections	Yes	Required for VS to send e-mail file attachments.
Sites.Read.All	Application	Read items in all site collections	Yes	Manage e-mail file attachments.

Table 2. Resource Owner Password Credentials (ROPC)
API/Permission Name	Type	Description	Admin consent required	Purpose
Microsoft Graph (3)
Files.ReadWrite.All	Delegated	Have full access to all files user can access	No	Required for VS to send e-mail file attachments.
Mail.ReadWrite	Delegated	Read and write access to user mail	No	VS reads and deletes e-mail for the specified inbox.
Mail.Send	Delegated	Send mail as a user	No	Send e-mail from VS.