---
title: "Microsoft Permissions for Apps"
slug: "microsoft-permissions-for-apps"
updated: 2025-05-29T18:27:16Z
published: 2025-05-29T18:27:16Z
canonical: "kb.connecttoteams.com/microsoft-permissions-for-apps"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.connecttoteams.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Permissions for Apps

## Introduction

The various ConnecttoTeams apps need to perform certain limited tasks within your Teams organization and end users' Teams accounts. These tasks can only be executed with permission from you - the Microsoft 365 organization's Global Administrator.

This article covers the permissions required by the various ConnecttoTeams apps.

> [!NOTE]
> Watch video:
> 
> For the actual steps the enterprise global admin should take to grant permissions to the app, please refer to this [video](https://www.youtube.com/watch?v=ERsLHc57RZw&t=195s).

## Permissions for PBX Connector App (also used for Trunk)

**Functions**

The PBX Connector App primarily needs permissions to execute the following functions:

- Deploy the ConnecttoTeams PBX Connector App to the O365 organization’s catalog.
- Query member user profiles in the O365 organization to map them to PBX users and phone numbers.
- Give app notifications to Teams users for incoming calls, missed calls, and voicemails.
- Present interactive cards in Teams channels to provide users with a rich GUI experience, allowing actions like listening to voicemails.

**Permissions**

The following permissions required by the PBX Connector App to execute the described functions are illustrated in this image taken from an enterprise’s [Teams Admin Center](https://admin.teams.microsoft.com/).

![](https://cdn.us.document360.io/312e5ae5-e3c1-465d-8e37-f253a7ba8eee/Images/Documentation/image(669).png?sv=2026-02-06&spr=https&st=2026-10-29T18%3A23%3A48Z&se=2026-10-29T19%3A23%3A48Z&sr=c&sp=r&sig=hGRpGlrJO1afSnzU%2FuhANmuYYmcvZIppe%2BBFHsAcWoM%3D)

The Teams Admin Center presents this interpretation of these permissions:

![](https://cdn.us.document360.io/312e5ae5-e3c1-465d-8e37-f253a7ba8eee/Images/Documentation/image(672).png?sv=2026-02-06&spr=https&st=2026-10-29T18%3A23%3A48Z&se=2026-10-29T19%3A23%3A48Z&sr=c&sp=r&sig=hGRpGlrJO1afSnzU%2FuhANmuYYmcvZIppe%2BBFHsAcWoM%3D)

## Permissions for SMS Connector App

**Functions**

The SMS Connector App primarily needs permissions to execute the following functions:

- Deploy the ConnecttoTeams SMS Connector App to the O365 organization’s catalog.
- Query member user profiles in the O365 organization to map them to SMS-enabled phone numbers.
- Create and update channel names to show the SMS recipient’s phone numbers and/or the contact names.
- Give app notifications to Teams users for incoming and outgoing SMS messages.
- Present interactive cards in Teams channels to provide users with a rich GUI experience, allowing actions like responding to SMS.

**Permissions**

The following permissions required by the SMS Connector App to execute the described functions are illustrated in this image taken from an enterprise’s Teams Admin Center.

![](https://cdn.us.document360.io/312e5ae5-e3c1-465d-8e37-f253a7ba8eee/Images/Documentation/image(673).png?sv=2026-02-06&spr=https&st=2026-10-29T18%3A23%3A48Z&se=2026-10-29T19%3A23%3A48Z&sr=c&sp=r&sig=hGRpGlrJO1afSnzU%2FuhANmuYYmcvZIppe%2BBFHsAcWoM%3D)

The Teams Admin Center presents this interpretation of these permissions:

![](https://cdn.us.document360.io/312e5ae5-e3c1-465d-8e37-f253a7ba8eee/Images/Documentation/image(674).png?sv=2026-02-06&spr=https&st=2026-10-29T18%3A23%3A48Z&se=2026-10-29T19%3A23%3A48Z&sr=c&sp=r&sig=hGRpGlrJO1afSnzU%2FuhANmuYYmcvZIppe%2BBFHsAcWoM%3D)

## Permissions for Chat App

**Functions**

The Chat App does not require new permissions to execute its functions.

The Teams Admin Center presents this interpretation of the capabilities of the Chat App.

![](https://cdn.us.document360.io/312e5ae5-e3c1-465d-8e37-f253a7ba8eee/Images/Documentation/image(675).png?sv=2026-02-06&spr=https&st=2026-10-29T18%3A23%3A48Z&se=2026-10-29T19%3A23%3A48Z&sr=c&sp=r&sig=hGRpGlrJO1afSnzU%2FuhANmuYYmcvZIppe%2BBFHsAcWoM%3D)

> [!NOTE]
> Watch video:
> 
> For the actual steps the enterprise global admin should take to grant permissions to the app, please refer to this [video](https://www.youtube.com/watch?v=ERsLHc57RZw&t=195s).

## Consent for Provider Admins

In addition to permissions given to the apps, there are actions that an Enterprise Admin has to take as services are used by the enterprise. **These actions can be executed by a the provider on behalf of the Enterprise Admin provided consents are granted.**

The following services are the consents that may be granted to the provider. [See this for more info and procedure for granting consent](/v1/docs/granting-consent-to-providers-to-perform-enterprise-provisioning).

![](https://cdn.us.document360.io/312e5ae5-e3c1-465d-8e37-f253a7ba8eee/Images/Documentation/image(676).png?sv=2026-02-06&spr=https&st=2026-10-29T18%3A23%3A48Z&se=2026-10-29T19%3A23%3A48Z&sr=c&sp=r&sig=hGRpGlrJO1afSnzU%2FuhANmuYYmcvZIppe%2BBFHsAcWoM%3D)