Table of Contents

CallRecords.Read.All

Allows the app to read call records for all calls and online meetings without a signed-in user.

The CallRecords.Read.All permission grants an application privileged access to callRecords for every call and online meeting within your organization, including calls to and from external phone numbers. This includes potentially sensitive details about who participated in the call, as well as technical information pertaining to these calls and meetings that can be used for network troubleshooting, such as IP addresses, device details, and other network information.

Important
  • Discretion should be used when granting these permissions to applications. Call records can provide insights into the operation of your business, and so can be a target for malicious actors. Only grant these permissions to applications you trust to meet your data protection requirements.
  • Make sure that you are compliant with the laws and regulations in your area regarding data protection and confidentiality of communications. Please see the Terms of Use and consult with your legal counsel for more information.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the CallRecords.Read.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category Application Delegated
Identifier 45bbb07e-7321-4fd7-a8f6-3ff27e6a81c8 -
DisplayText Read all call records -
Description Allows the app to read call records for all calls and online meetings without a signed-in user. -
AdminConsentRequired - -

Graph Methods

API supports delegated access (access on behalf of a user)
API supports app-only access (access without a user)

Methods

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: aiInteraction

Property Type Description
appClass String The data source for Copilot data. For example, IPM.SkypeTeams.Message.Copilot.Excel or IPM.SkypeTeams.Message.Copilot.Loop.
attachments aiInteractionAttachment collection The collection of documents attached to the interaction, such as cards and images.
body itemBody The body of the message, including the text of the body and its body type.
contexts aiInteractionContext collection The identifer that maps to all contexts associated with an interaction.
conversationType String The type of the conversation. For example, appchat or bizchat.
createdDateTime DateTime The time when the interaction was created.
etag String The timestamp of when the interaction was last modified.
from identitySet The user, application, or device that is associated with this interaction.
id String The identifier for the message.
interactionType aiInteractionType Indicates whether the interaction is a prompt or a Copilot response. Possible values are userPrompt, aiResponse, unknownFutureValue.
links aiInteractionLink collection The collection of links that appear in the interaction.
locale String The locale of the sender.
mentions aiInteractionMention collection The collection of the entities that were mentioned in the interaction, including users, bots, and so on.
requestId String The identifier that groups a user prompt with its Copilot response.
sessionId String The thread ID or conversation identifier that maps to all Copilot sessions for the user.