> For the complete documentation index, see [llms.txt](https://kb.rezonate.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kb.rezonate.io/core-integrations/azure-integration/required-privilegees.md).

# Required Privilegees

### Read Only Integration

For the integration to operate properly, the following **read-only** privileges are required

<table><thead><tr><th width="375">Permission</th><th>Description</th><th data-hidden></th></tr></thead><tbody><tr><td>TeamMember.Read.All</td><td>List team members</td><td></td></tr><tr><td>IdentityRiskEvent.Read.All</td><td>List identity risk events</td><td></td></tr><tr><td>AuditLog.Read.All</td><td>Read Audit Log</td><td></td></tr><tr><td>Policy.Read.All</td><td>Read Policies</td><td></td></tr><tr><td>Member.Read.Hidden</td><td>List Members</td><td></td></tr><tr><td>Reports.Read.All</td><td>List Reports</td><td></td></tr><tr><td>Application.Read.All</td><td>List Applications</td><td></td></tr><tr><td>DirectoryRecommendations.Read.All</td><td>List Directory Recommendadtions </td><td></td></tr><tr><td>Organization.Read.All</td><td>Read Organization Info</td><td></td></tr><tr><td>IdentityRiskyUser.Read.All</td><td>Read Identity Risks</td><td></td></tr><tr><td> UserAuthenticationMethod.Read.All</td><td>List User Auth Methods</td><td></td></tr><tr><td>TeamSettings.Read.All</td><td>List Team Settings</td><td></td></tr><tr><td>IdentityProvider.Read.All</td><td>List Identity Providers</td><td></td></tr><tr><td>GroupMember.Read.All</td><td>List Group Members</td><td></td></tr><tr><td>Domain.Read.All</td><td>List Domain </td><td></td></tr><tr><td>RoleManagement.Read.All</td><td>List Role Management</td><td></td></tr><tr><td>ReportSettings.Read.All</td><td>List Report Settings</td><td></td></tr><tr><td>User.Read.All</td><td>List Users</td><td></td></tr><tr><td>Directory.Read.All</td><td>List Directory</td><td></td></tr><tr><td>MailboxSettings.Read</td><td>List Mailbox Settings</td><td></td></tr><tr><td>AdministrativeUnit.Read.All</td><td>List Admin Units</td><td></td></tr><tr><td>Group.Read.All</td><td>List Groups</td><td></td></tr><tr><td>SecurityAlert.Read.All</td><td>List Security Alerts</td><td></td></tr><tr><td>Channel.ReadBasic.All</td><td>List Channels</td><td></td></tr><tr><td>IdentityRiskyServicePrincipal.Read.All</td><td>List Identity Risks</td><td></td></tr><tr><td>Policy.Read.PermissionGrant</td><td>List Policies </td><td></td></tr></tbody></table>

### Read-Write Integration

{% hint style="info" %}
The Required Privileges are in addition to the read-only permissions to enable response & remediation actions
{% endhint %}

<table><thead><tr><th>Permission</th><th>Description</th><th data-hidden></th></tr></thead><tbody><tr><td>User.ReadWrite.All</td><td>Allows the app to read and update user profiles without a signed-in user.</td><td></td></tr><tr><td>User.ManageIdentities.All</td><td>Allows the app to read, update, and delete identities that are associated with a user's account, without a signed-in user. This controls the identities users can sign in with.</td><td></td></tr></tbody></table>