What permissions do I need for Trifecta Teams?

What permissions do I need for Trifecta Teams?



Our platform is 100% dependent on Microsoft 365 admin permissions that are assigned to your account in Office365. As the platform grows with new features we will time to time require different permissions. Below are the current minimum permissions used as of today.

Initial Setup

  1. A global admin account is required to get our app added to your Azure Enterprise Apps.
  2. We also add a named location, so we are a trusted source to allow for bypassing multi-factor authentication.
    1. We do this because we have to use some Microsoft Powershell commands to retrieve and update data on your behalf. Currently, there is no way to allow multi-factor authentication for this. Our portal requires multi-factor authentication, so we make up for this. Everything else is controlled by your organization.
  3. If you are using a partner hosted SBC phone box, then we will also setup a domain, and user to enable the domain.

Normal Every Day Use (details here)

  1. User Administrator Role - In order to enable the telephone license to new users, or replace their base Microsoft license (E1, E3, E5 etc.), and add Virtual Phone licenses to IVR/ Queue accounts.
    1. organization/standard/read - Read basic properties on an organization
    2. users/licenseDetails/read - Read license details of users
    3. users/assignLicense - Manage user licenses
    4. users/standard/read - Read basic properties on users
    5. users/photo/read - Read photo of users
  2. Skype for Business admin Role - Used to make telephone changes and enable telephone policies to users.
  3. Teams Administrator - Used to manage the entire Teams phone system, policies, and devices.