A. Required Permissions

The required permissions for the NTRS can be split into two parts. API permissions and role permissions.

Below are the required API permissions and role permissions.

A.1. API Permissions

The API permissions are used by the NTRS in order to join the call of the compliance policy holder.

• Calls.AccessMedia.All

• Calls.JoinGroupCall.All

See Microsoft’s Documentation on API permissions here for more information.

A.2. Role Permissions

The role permission is used by the NTRS in order to query user information of the users in the call. This includes phone number, address, etc.

• microsoft.directory/externalUserProfiles/standard/read

See Microsoft’s Documentation on role permissions here for more information.