> For the complete documentation index, see [llms.txt](https://support.meetuma.ai/uma-knowledgebase/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.meetuma.ai/uma-knowledgebase/integrations/calendar/microsoft-365/microsoft-365-permissions.md).

# Microsoft 365 permissions

<figure><img src="/files/ie5ZNYl80zFxnZsJWXWo" alt=""><figcaption></figcaption></figure>

### Full permissions

This is UMA's preferred method of interacting with Microsoft Graph API as the level of access provides a more feature rich solution for end users.

The full permissions are documented as follows:

<details>

<summary><mark style="color:blue;">Calendars.ReadWrite</mark></summary>

***Read and write calendars in all mailboxes***

***

We need this permission to write to your users and resource calendars.

This is required when booking or editing a booking through UMA.

</details>

<details>

<summary><mark style="color:blue;">Group.Read.All</mark></summary>

***Read all groups***

***

We need this permission to read your Microsoft 365 groups for [user sync](/uma-knowledgebase/integrations/calendar/microsoft-365/user-sync-legacy-search-scim.md).

</details>

<details>

<summary><mark style="color:blue;">GroupMember.Read.All</mark></summary>

***Read all group memberships***

***

We need this permission to read the members of your Microsoft 365 groups for [user sync](/uma-knowledgebase/integrations/calendar/microsoft-365/user-sync-legacy-search-scim.md).

</details>

<details>

<summary><mark style="color:blue;">Place.Read.All</mark></summary>

***Read all company places***

***

Allows UMA to read your company's places (conference rooms and room lists) for calendar events and other applications, on behalf of the signed-in user.

</details>

<details>

<summary><mark style="color:blue;">User.Read.All</mark></summary>

***Read all users full profiles***

***

Allows UMA to read the full set of profile properties including photos, reports, and managers of other users in your organisation, on behalf of the signed-in user.

</details>

### Lite permissions

Lite permissions should only be used for where profile photo and group user sync is not required.

The lite permissions are documented as follows:

<details>

<summary><mark style="color:blue;">Calendars.ReadWrite</mark></summary>

***Read and write calendars in all mailboxes***

***

We need this permission to write to your users and resource calendars.

This is required when booking or editing a booking through UMA.

</details>

<details>

<summary><mark style="color:blue;">Places.Read.All</mark></summary>

***Read all company places***

***

Allows UMA to read your company's places (conference rooms and room lists) for calendar events and other applications, on behalf of the signed-in user.

</details>