Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

This page lists all permissions that our app requires across Confluence, Microsoft and Jira and gives a short explanation why we need the permission.

Info

We only use the data to provide app features. We try to request as little permissions as possible, but unfortunately, some permissions are too broad. We are constantly working with Atlassian and Microsoft to improve this.

You may also check out our Microsoft publisher attestation of the app: Publisher Attestation.

...

Confluence Permissions

When installing the app on Confluence Cloud, it will ask for the following permissions:

Expand
titleRead & Write & Delete data

These are basic permissions for every app. We need to store settings in the instance to make the app work.

Expand
titleAct on a user's behalf

This permission allows us to impersonate the user. When we work with pages or spaces, it makes it easy to ensure that the current user has the correct permissions to update the page/space.

...

Microsoft 365 permissions

These permissions are requested one by one, once a users tries to use a feature that requires the permission.
You can find an explanation on all permissions here: https://docs.microsoft.com/en-US/graph/permissions-reference

Expand
titleUser info: email, offline_access, profile

These permissions are always requested through the app once you login to Microsoft 365. It is required to being able to read the most basic profile information about the current user and allows us to get a token for the future usage.

Expand
titleUser directory: User.ReadBasic.All

Allows us to read basic information about the users in your tenant. This is required to give smart suggestions when users search for other users.

Expand
titleOwn user calendars: Calendar.ReadWrite

Allows us to read the calendars of the current user to display them in Confluence.

Expand
titleOther users calendars: Calendar.ReadWrite.Shared

Allows to open calendars that are shared with the current user - e.g. the schedule of a coworker.

Expand
titleMeeting Rooms: Place.Read.All

Allows to search for meeting rooms within your tenant to embed them into Confluence.

Expand
titleGroups & Teams Calendar: Group.ReadWrite.All

Allows to access the Office Groups (including Teams) of the current user and retrieve the associated calendar.

Expand
titlePeople.Read

Allows the app to read a ranked list of relevant people of the signed-in user. The list includes local contacts, contacts from social networking, your organization's directory, and people from recent communications (such as email and Skype).

Expand
titleMailboxSettings.Read

Used to get Microsoft-related settings like timezones, working hours etc.

...

Jira cloud app

Expand
titleUser Profile: me:read

Get the own Jira user and was used for the login. Used on the UI for display name, avatar image, etc.

Expand
titleJira User Data: read:jira-work

Allows us to access Jira projects, releases and issues the current user has access to.