Permission

Description

10KC use case

Read all groups

Allows the app to read group properties and memberships, and read conversations for all groups, without a signed-in user.

We cannot read group chats, just group information (group names and their IDs and who is in them)

To get a list of all Teams in a linked MS Teams tenant.

You can then link the right Teams to a 10KC Hub to sync users.

Read all app catalogs

Allows the app to read apps in the app catalogs without a signed-in user.

To find the internal app ID of the 10KC bot application installed in the Microsoft Teams Admin center.

Read the names and descriptions of all channels

Read all channel names and channel descriptions, without a signed-in user.

To get a list of channels from a linked MS Teams tenant.

Read the members of all channels

Read the members of all channels, without a signed-in user.

To get a list of all users of a specific MS Teams channel linked to a 10KC hub.

10KC will create accounts for these users and send them a link to join 10KC.

Note that we can only use this permission to create a chat for users in a channel that your AzureAD admin will link to 10KC. We also are only reading basic profile information (first name, last name, email address, user ID, display name, which channel they are in).

Allow the Teams app to manage itself for all users

Allows a Teams app to read, install, upgrade, and uninstall itself to any user, without a signed-in user.

This is only for users in channels that you’ve linked in 10KC Tenant Admin settings. Not any users outside of the channels you’ve linked to 10KC.

To install the 10KC bot for users in a Team.

Users can then receive notifications and reminders from the bot regarding various 10KC activities such as Office Hours and Introductions.

Create chats

Allows the app to create chats without a signed-in user.

To create a group chat between introduced users and the 10KC bot.

Allow the Teams app to manage itself for all chats

Allows a Teams app to read, install, upgrade, and uninstall itself for any chat, without a signed-in user.

This is only for chats that our 10KC MS Teams app will create. This does not give us scope for all chats outside of the 10KC MS Teams app.

To install the bot to group chats of Introduced users.

The bot can then send messages and notifications to these chats to facilitate interaction.

Sign in and read user profile

Allows users to sign-in to the app, and allows the app to read the profile of signed-in users. It also allows the app to read basic company information of signed-in users.

To check if the 10KC bot is already installed for a user