Space Connect Permissions on Microsoft 365 and why they are required

Please see the full list below of permissions that are being consented to and why:-

Permission	What is does	Why is this needed
Sign in and read the user profile	Allows users to sign in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.	It allows Space Connect to read the logged-in users' basic information such as their names and email address.
Read all users' full profiles	Allows the app to read user profiles without a signed-in user.	This is used to sync users into Space Connect.
Read Organisational Information	Allows the app to read user profiles organisation.	This is used to identify the user's organisation and direct them to the correct environment.
Read all group memberships	Allows the app to read memberships and basic group properties for all groups without a signed-in user.	This is used to sync users into Space Connect and apply the permissions depending on which group they are in.
Read directory data	Allows the app to read data in your organization's directory, such as users, groups and apps, without a signed-in user.	This is used to sync users into Space Connect and apply the permissions depending on which group they are in.
Maintain Access to Data you have given access to	Allows the app to see and update the data you gave it access to, even when you are not currently using the app. This does not give the app any additional permissions.	These replicated permissions are needed to identify users and perform booking tasks.
View Users' basic profile	Allows the app to see your basic profile (name, picture, user name).	Read the logged-in user's basic information such as name and email address.
Access mailboxes as the signed-in user via Exchange Web Services	Allows the app to have the same access to mailboxes as the signed-in user via Exchange Web Services.	Access the logged-in user's mailbox via Exchange Web services to collect appointments/bookings.
Read and write calendars in all mailboxes	Allows the app to create, read, update, and delete events of all calendars without a signed-in user.	Allows the Space Connect Platform to read and create meetings on the user's behalf of the signed-in user's organisation on office365
Use Exchange Web Services with full access to all mailboxes	Allows the app to have full access via Exchange Web Services to all mailboxes without a signed-in user.	This permission enables Space Connect to access all users' and room calendars (not emails) to check availability, and book and edit meetings using EWS APIs for On-Premise accounts.
Read all usage reports	Allows an app to read all service usage reports without a signed-in user. Services that provide usage reports include Office 365 and Azure Active Directory	Used for creating and displaying Microsoft Powerbi reports.
Read and write mail in all mailboxes	Allows the app to create, read, update, and delete mail in all mailboxes without a signed-in user. Does not include permission to send mail.	Allows Space Connect to create, read, update, and delete calendar data without a signed-in user.
Read and create online meetings	Allows the app to read and create online meetings as an application in your organization.	Allows Space Connect to read and create online meetings as an application in your organisation.
Access Space Connect	Allow the application to access Space Connect on behalf of the signed-in user.	Access the Space Connect Platform on the user's behalf.
Read user's online meetings	Allows the app to read online meeting details on behalf of the signed-in user.	Read the user's meetings from office365.
Read and create user's online meetings	Allows the app to read and create online meetings on behalf of the signed-in user.	Create meetings in office 365 via the Space Connect platform on behalf of the user.

To find out which permissions are specific to your organisation's set-up within Space Connect please click the relevant links below.