Ready to Move?
MS Teams Connected App Permissions Required

MS Teams Connected App Permissions Required

Admin Permissions

API / Permission Name Type Admin Consent Required Consent Type Purpose / Usage Required For
Application.Read.All Application Yes Admin Read all applications Application Migration
Application.ReadWrite.All Application Yes Admin Read and write all applications Application Migration
Channel.Create Application Yes Admin Create channels Teams Migration
Channel.Delete.All Application Yes Admin Delete channels Teams Migration
Channel.ReadBasic.All Application Yes Admin Read the names and descriptions of all channels Teams Migration
ChannelMember.Read.All Application Yes Admin Read the members of all channels Teams Migration
ChannelMember.ReadWrite.All Application Yes Admin Add and remove members from all channels Teams Migration
ChannelMessage.Read.All Application Yes Admin Read all channel messages (org-wide) Chat Migration
ChannelSettings.Read.All Application Yes Admin Read the names, descriptions, and settings of all channels Teams Migration
Chat.Create Application Yes Admin Create chats Chat Migration
Chat.Read.All Application Yes Admin Read all chats Chat Migration
Chat.ReadBasic.All Application Yes Admin Read names and members of all chat threads Chat Migration
ChatMember.Read.All Application Yes Admin Read the members of all chats Chat Migration
ChatMember.ReadWrite.All Application Yes Admin Add and remove members from all chats Chat Migration
ChatMessage.Read.All Application Yes Admin Read all chat messages Chat Migration
Directory.Read.All Application Yes Admin Read directory data Directory Migration
ExternalUserProfile.Read.All Application Yes Admin Read all external user profiles External User Migration
ExternalUserProfile.ReadWrite.All Application Yes Admin Read and write all external user profiles External User Migration
Files.Read.All Application Yes Admin Read files in all site collections SharePoint Migration
Files.ReadWrite.All Application Yes Admin Read and write files in all site collections SharePoint Migration
Files.ReadWrite.AppFolder Application Yes Admin Have full access to the application's folder without a signed in user Application File Storage
Files.SelectedOperations.Selected Application Yes Admin Access selected Files without a signed in user Selected File Migration
Group.Read.All Application Yes Admin Read all groups Group Migration
Group.ReadWrite.All Application Yes Admin Read and write all groups Group Migration
GroupMember.Read.All Application Yes Admin Read all group memberships Group Migration
GroupMember.ReadWrite.All Application Yes Admin Read and write all group memberships Group Migration
GroupSettings.Read.All Application Yes Admin Read all group settings Group Migration
GroupSettings.ReadWrite.All Application Yes Admin Read and write all group settings Group Migration
ProfilePhoto.Read.All Application Yes Admin Read profile photo of a user or group Profile Migration
ProfilePhoto.ReadWrite.All Application Yes Admin Read and write profile photo of a user or group Profile Migration
Reports.Read.All Application Yes Admin Read all usage reports Usage Reports
Sites.Create.All Application Yes Admin Create Site Collections without a signed in user SharePoint Migration
Sites.FullControl.All Application Yes Admin Have full control of all site collections SharePoint Administration
Sites.Manage.All Application Yes Admin Create, edit, and delete items and lists in all site collections SharePoint Migration
Sites.Read.All Application Yes Admin Read items in all site collections SharePoint Migration
Sites.ReadWrite.All Application Yes Admin Read and write items in all site collections SharePoint Migration
Sites.Selected Application Yes Admin Access selected site collections Selected SharePoint Migration
Team.Create Application Yes Admin Create teams Teams Migration
Team.ReadBasic.All Application Yes Admin Get a list of all teams Teams Migration
TeamMember.Read.All Application Yes Admin Read the members of all teams Teams Migration
TeamMember.ReadWrite.All Application Yes Admin Add and remove members from all teams Teams Migration
TeamMember.ReadWriteNonOwnerRole.All Application Yes Admin Add and remove members with non-owner role for all teams Teams Migration
User.Read.All Application Yes Admin Read all users' full profiles User Migration
User.ReadBasic.All Application Yes Admin Read all users' basic profiles User Migration
User.ReadWrite.All Application Yes Admin Read and write all users' full profiles User Migration
UserAuthMethod-Email.Read.All Application Yes Admin Read all users' email methods User Authentication Migration
UserAuthMethod-Email.ReadWrite.All Application Yes Admin Read and write all users' email methods User Authentication Migration
VerifiedId-Profile.Read.All Application Yes Admin Read Verified Id profiles Verified ID Migration

Public Permissions

API / Permission Name Type Admin Consent Required Consent Type Purpose / Usage Required For
Application.Read.AllDelegatedYesAdminRead Azure app registrationsIntegration Setup
Application.ReadWrite.AllDelegatedYesAdminCreate/update app registrationsIntegration Setup
Channel.CreateDelegatedYesAdminCreate Teams channelsTeams Migration
Channel.Delete.AllDelegatedYesAdminDelete channelsTeams Migration
Channel.ReadBasic.AllDelegatedNoUserRead channel names/descriptionsTeams Migration
ChannelMember.Read.AllDelegatedYesAdminRead channel membersTeams Migration
ChannelMember.ReadWrite.AllDelegatedYesAdminAdd/remove channel membersTeams Migration
ChannelMessage.Read.AllDelegatedYesAdminRead user channel messagesChat Migration
ChannelMessage.ReadWriteDelegatedYesAdminRead/write channel messagesChat Migration
ChannelMessage.SendDelegatedNoUserSend messages to channelMessaging
ChannelSettings.Read.AllDelegatedYesAdminRead channel settingsTeams Migration
ChannelSettings.ReadWrite.AllDelegatedYesAdminModify channel settingsTeams Migration
Chat.CreateDelegatedNoUserCreate chatsChat Migration
Chat.ReadDelegatedNoUserRead user chatsChat Migration
Chat.ReadBasicDelegatedNoUserRead chat participantsChat Migration
Chat.ReadWriteDelegatedNoUserRead/write user chatsChat Migration
Chat.ReadWrite.AllDelegatedYesAdminRead/write all chatsChat Migration
ChatMember.ReadDelegatedYesAdminRead chat membersChat Migration
ChatMember.ReadWriteDelegatedYesAdminAdd/remove chat membersChat Migration
ChatMessage.ReadDelegatedNoUserRead chat messagesChat Migration
ChatMessage.SendDelegatedNoUserSend chat messagesMessaging
Directory.Read.AllDelegatedYesAdminRead directory (users/org)User Migration
emailDelegatedNoUserAccess user emailAuthentication
Files.ReadDelegatedNoUserRead user filesFile Migration
Files.Read.AllDelegatedNoUserRead all accessible filesFile Migration
Files.Read.SelectedDelegatedNoUserRead selected filesFile Migration
Files.ReadWriteDelegatedNoUserModify user filesFile Migration
Files.ReadWrite.AllDelegatedNoUserModify all files user can accessFile Migration
Files.ReadWrite.AppFolderDelegatedNoUserAccess app-specific folderFile Migration
Files.ReadWrite.SelectedDelegatedNoUserModify selected filesFile Migration
Files.SelectedOperations.SelectedDelegatedYesAdminAccess selected files with controlFile Migration
Group.Read.AllDelegatedYesAdminRead Teams/GroupsTeams Migration
Group.ReadWrite.AllDelegatedYesAdminManage Teams/GroupsTeams Migration
GroupMember.Read.AllDelegatedYesAdminRead group membersTeams Migration
GroupMember.ReadWrite.AllDelegatedYesAdminManage group membersTeams Migration
GroupSettings.Read.AllDelegatedYesAdminRead group settingsTeams Migration
GroupSettings.ReadWrite.AllDelegatedYesAdminModify group settingsTeams Migration
offline_accessDelegatedNoUserMaintain login session (refresh token)Authentication
profileDelegatedNoUserRead user basic profileAuthentication
Sites.Create.AllDelegatedYesAdminCreate SharePoint sitesFile Migration
Sites.FullControl.AllDelegatedYesAdminFull control of SharePointFile Migration
Sites.Manage.AllDelegatedNoUserManage SharePoint contentFile Migration
Sites.Read.AllDelegatedNoUserRead SharePoint dataFile Migration
Sites.ReadWrite.AllDelegatedNoUserModify SharePoint dataFile Migration
Sites.SelectedDelegatedNoUserAccess selected sitesFile Migration
Team.CreateDelegatedNoUserCreate TeamsTeams Migration
Team.ReadBasic.AllDelegatedNoUserRead Teams infoTeams Migration
TeamMember.Read.AllDelegatedYesAdminRead team membersTeams Migration
TeamMember.ReadWrite.AllDelegatedYesAdminManage team membersTeams Migration
TeamMember.ReadWriteNonOwnerRole.AllDelegatedYesAdminManage non-owner membersTeams Migration
User.ReadDelegatedNoUserLogin + basic profileAuthentication
User.Read.AllDelegatedYesAdminRead all user profilesUser Migration