Please see the full list below of permissions that being consented to and why:
| Permission | What it Does? | Why is this needed? |
| Sign in and read the user profile | Allows users to sign in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users. | It allows Evoko Workplace to read the logged-in users' basic information such as their names and email address. |
| Read all users' full profiles | Allows the app to read user profiles without a signed-in user. | This is used to sync users into Evoko Workplace. |
| Read Organizational Information | Allows the app to read user profiles organization. | This is used to identify the user's organization and direct them to the correct environment. |
| Read all group memberships | Allows the app to read memberships and basic group properties for all groups without a signed-in user. | This is used to sync users into Evoko Workplace and apply the permissions depending on which group they are in. |
| Read directory data | Allows the app to read data in your organization's directory, such as users, groups and apps, without a signed-in user. | This is used to sync users into Evoko Workplace and apply the permissions depending on which group they are in. |
| Maintain Access to Data you have given access to | Allows the app to see and update the data you gave it access to, even when you are not currently using the app. This does not give the app any additional permissions. | These replicated permissions are needed to identify users and perform booking tasks. |
| View Users' basic profile | Allows the app to see your basic profile (name, picture, user name). | Read the logged-in user's basic information such as name and email address |
| Access mailboxes as the signed-in user via Exchange Web Services | Allows the app to have the same access to mailboxes as the signed-in user via Exchange Web Services. | Access the logged-in user's mailbox via Exchange Web services to collect appointments/bookings. |
| Read and write calendars in all mailboxes | Allows the app to create, read, update, and delete events of all calendars without a signed-in user. |
Allows the Evoko Workplace Platform to read and create meetings on the user's behalf of the signed-in user's organization on office365 |
| Read and write mail in all mailboxes | Allows the app to create, read, update, and delete mail in all mailboxes without a signed-in user. Does not include permission to send mail. |
Allows Evoko Workplace to create, read, update, and delete calendar data without a signed-in user. |
| Read and create online meetings | Allows the app to read and create online meetings as an application in your organization |
Allows Evoko Workplace to read and create online meetings as an application in your organization. |
| Access Evoko Workplace | Allow the application to access Evoko Workplace on behalf of the signed-in user. |
Access the Evoko Workplace Platform on the user's behalf. |
| Read user's online meetings | Allows the app to read online meeting details on behalf of the signed-in user. |
Read the user's meetings from office365 |
| Read and create user's online meetings | Allows the app to read and create online meetings on behalf of the signed-in user. |
Create meetings in office 365 via the Evoko Workplace platform on behalf of the user. |