Which OAuth permissions are required for the app?
OAuth scopes allow us to specify exactly how an app needs to access a user’s monday.com and Microsoft 365 accounts.
Scopes for Microsoft 365
Scopes used
The scopes listed below are all the Microsoft Graph OAuth scopes that the app does use.
Scope | Description | Why used |
---|---|---|
| Sign users in | To sign-in to Microsoft 365 |
| Maintain access to data you have given it access to | Allows the user to sign in to Microsoft 365 a single time and then use that |
| View users' basic profile | To view the profile details associated with your Microsoft 365 user. |
| View users' email address | To view the email address associated with your Microsoft 365 user. |
| Sign in and read user profile | To view who you are signed into Microsoft 365 as. |
| Have full access to all files user can access | To access SharePoint and OneDrive for Business files and folders. |
| Allows the application to edit or delete documents and list items in all site collections on behalf of the signed-in user. | To access SharePoint and OneDrive for Business files and folders. |
| Send mail as a user | To send emails on the behalf of the Microsoft 365 user. |
Scopes not used
A full list of Microsoft Graph permissions is available in the Microsoft Graph permissions reference.
Scopes for monday.com
Scopes used
The scopes listed below are all the monday.com OAuth scopes that the app does use.
Scope | Description | Why used |
---|---|---|
| Read a user's profile information | Used by data export automations to display user data |
| Read user's boards data | Used by data export automations: |
| Modify user's boards data | Used by data import automations: |
| Read user's workspaces data | |
| Read the profile information of the users on the account | Used by data export automations to populate the data for columns of type People |
| Read general information about the account | Used by data export automations to display account data |
| Read updates and replies the user can see | Used by Export/sync files attached to updates into SharePoint |
| Read information of assets that the user has access to | Used by |
| Read information about teams in the account | Used by data export automations to populate the data for columns of type People |
Scopes not used
The scopes listed below are all the monday.com OAuth scopes that the app does not use.
Scope | Description |
---|---|
| Read user's docs |
| Modify user's docs |
| Modify user's workspaces data |
| Modify the profile information of the users on the account |
| Send notifications on behalf of the user |
| Post or edit updates on behalf of the user |
| Read the tags of the account |
| Create and modify webhooks |
| Read existing webhooks configuration |