What permissions does ASSIST request when connecting to Microsoft Teams?
When you connect your Microsoft account to Wyser ASSIST, Microsoft will show you a consent screen explaining what access ASSIST is requesting.
ASSIST requests two Microsoft Graph permissions:
-
Files.Read
- User.Read
These are delegated permissions. This means ASSIST accesses information on your behalf using your signed-in Microsoft account.
What does Files.Read allow?
Files.Read gives ASSIST read-only access to files in your OneDrive that you can access.
ASSIST uses this permission to:
- Find recordings in your Recordings folder
- Read and download those recordings
- Send the recordings to ASSIST for processing
Microsoft describes Files.Read as allowing an app to read the signed-in user's files.
ASSIST does not have permission to write to, modify or delete files in your OneDrive.
It does not use Files.ReadWrite, which would allow an app to create, update and delete files.
What does User.Read allow?
User.Read allows ASSIST to read basic information about the signed-in Microsoft account.
ASSIST uses this to identify your account and associate uploaded recordings with the correct user.
This can include information such as:
- Your name
- Your email address
- Your Microsoft user or tenant ID
Microsoft describes User.Read as allowing an app to sign users in and read their basic profile information.
What can ASSIST do with your OneDrive?
ASSIST can:
- Read files that you can access
- Find recordings in your Recordings folder
- Access recordings so they can be uploaded to ASSIST
ASSIST cannot:
- Create files in your OneDrive
- Edit or overwrite your files
- Delete files from your OneDrive
- Change your OneDrive content
The connection uses delegated access, so ASSIST acts on behalf of the signed-in user rather than having independent access to the organisation's OneDrive.
What happens to my recordings?
When ASSIST accesses a recording from OneDrive, the recording is sent directly to the ASSIST API for upload and processing.
The recording is not stored elsewhere as a separate long-term copy.
Once the recording has been uploaded to ASSIST, it is handled under Wyser's existing data retention policy.
For more information, see How long will you keep my data?
Why does Microsoft ask me to approve these permissions?
Microsoft uses a consent screen to show you what access an application is requesting before it can access protected Microsoft resources.
The permissions shown are the permissions ASSIST needs to connect to your OneDrive and identify your Microsoft account.
Your organisation may have Microsoft settings that require an administrator to approve applications before users can connect them. In this case, you may need to ask your Microsoft 365 administrator to approve ASSIST.
In brief
ASSIST requests read-only access to your OneDrive recordings and basic information about your Microsoft account.
It does not have permission to change or delete your OneDrive files.
Your recordings are accessed for processing and sent directly to the ASSIST API rather than being retained as a separate long-term copy.