| Permission | Admin Consent? | Description |
|---|---|---|
| offline_access Type: Delegated |
No | These are not one-time permissions, so access to the data (e.g. the address book and email settings) continues until the app is uninstalled. |
| Openid Type: Delegated |
No |
Enables user identity and sign-in |
| Profile Type: Delegated |
No |
Enables the app to access the app users basic profile for name, email, avatar. |
| GroupMember.Read.All Type: Application & Delegated |
Yes |
Enables reading the distribution list membership (names and email addresses) for counting the size of the list and measuring each unique address. |
| MailboxSettings.Read Type: Application & Delegated |
Yes |
MailboxSettings.Read allows the app to read recipient mailbox settings for language preference, working hours and time zone, enabling the send by time-zone feature. |
| OrgContact.Read.All Type: Application & Delegated |
Yes |
Allows the app to read the Global Address List (GAL) names and email addresses for addressing and personalization. |
| People.Read.All Type: Application & Delegated |
Yes |
Enables the app to read the PoliteMail user’s People records and lists for use when addressing email, not limited to the GAL. |
| User.Read Type: Delegated |
No |
The User.Read permission allows the app to read the user’s email profile (name, email, avatar, ) and is used for authentication and OpenID tokens. |
| User.Read.All Type: Application & Delegated |
Yes |
The User.Read.All permission allows the app to read recipient mailbox profiles for name, email, language preference, manager, working hours and time zone, enabling features like the send by time-zone feature and list by management hierarchy. |
| Contacts.Read Type: Delegated |
No |
Enables the app to read the PoliteMail user’s local contact folders (names and email address), used for addressing and personalization. |
| Contacts.Read.Shared Type: Delegated |
No |
Enables the app to read the PoliteMail user’s shared mailboxes or shared contact foldres (names and email address), used for addressing and personalization. |
| Group.Read.All Type: Delegated |
Yes |
Enables reading the names of available groups and distribution lists, used for addressing email. |
| Mail.Read.Write Type: Delegated |
No |
A legal compliance feature, where PoliteMail messages are saved to the users Sent Items folder for journaling, which supports compliance tools such as Microsoft Purview, Global Relay, and Hadrius and for Exchange message trace. |
Additional Required Permissions for Sending via Microsoft Graph
These permissions allow messages to be sent via Graph and validate message properties.
| Permission | Admin Consent? | Description |
|---|---|---|
| Mail.ReadBasic Type: Delegated | No | Read user basic email |
| Mail.ReadBasic.All Type: Application | Yes | Read basic email in all mailboxes |
| Mail.ReadBasic.Shared Type: Delegated | No | Read user and shared basic email |
| Mail.Send Type: Application & Delegated | Yes/No | Send email as a user. Admin consent needed for Delegated permission. |
| Mail.Send.Shared Type: Delegated | No | Send email on behalf of users |
