Microsoft Entra ID domains - Permissions for applications registered in Azure AD | Help Center

Defining permissions for the application registered in Azure AD

Applications are authorised to call APIs when they receive the appropriate permissions. The following is a list of permissions required for integration with NDD Print Portal 360

aplicativos

Application.ReadWrite.All

Type	application
Description	Allows you to read, update, delete, and perform actions on access reviews, reviewers, decisions, and settings in the organisation without a user being logged in.

Application.ReadWrite.OwnedBy

Type	application
Description	Allows the application to create other applications and manage them completely (read, update, update secrets, and delete applications) without a user being logged in.

Directory.Read.All

Type	application
Description	Allows the application to read data in your organisation's directory, such as users, groups, and applications, without a user being logged in.

email

Type	delegate
Description	Allows the application to read the primary email address of your users.

Group.Read.All

Type	application
Description	Allows the app to read group properties and associations and read conversations from all groups without a user being logged in.

GroupMember.Read.All

Type	application
Description	Allows the application to read groups and basic group properties for all groups without a user logged in.

OpenId

Type	delegate
Description	Allows the application to read groups and basic group properties for all groups without a logged-in user.

Organization.Read.All

Type	application
Description	Allows the application to read the organisation and related resources without a user logged in.

Policy.ReadWrite.ApplicationConfiguration

Type	application
Description	Allows the app to read and write your organisation's app configuration policies without a user being logged in.

User.ManageIdentities.All

Type	application
Description	Allows the application to read, update, and delete identities associated with a user account without a user being logged in

User.Read.All

Type	application
Description	Allows the application to read user profiles without a user logged in.

User.ReadWrite.All

Type	application
Description	Allows the application to read and update user profiles without a user logged in.

Information for integrating Microsoft Entra ID with NDD Print Portal 360
After completing the application registration, the Microsoft Entra administration centre will display some information on the Overview panel. The following information is required to complete the domain registration on NDD Print Portal 360 Application ID (client) Application domain Directory ID (tenant) Client secret

Information for integrating Microsoft Entra ID with NDD Print Portal 360

After completing the application registration, the Microsoft Entra administration centre will display some information on the Overview panel. The following information is required to complete the domain registration on NDD Print Portal 360

Application ID (client)
Application domain
Directory ID (tenant)
Client secret