What permissions does ChangePilot require from our tenant?
ChangePilot gathers information from your tenant in order to know the M365 Message Center change items it has received. To enable this, certain read-only permissions are required.
How ChangePilot Works
ChangePilot reads (read only) Message Center messages and Service Health messages from your tenant, as well as from the Public Roadmap. Items are written to Azure SQL for the Empowering.Cloud team to review, summarise, tag and categorise before being published.
ChangePilot Permissions
The individual conducting the deployment on the customer side must be a Tenant Global Administrator. This is required to give the application read access to the tenant Message Center and Service Health.
The following permissions are required for ChangePilot:
- Read service health: read-only access to Microsoft 365 Service Health messages for your tenant
- Read service messages: Read-only access to Microsoft 365 Message Center messages for your tenant
- Access selected site collections – to access the ChangePilot Microsoft Teams team only (used for ChangePilot Pro users only)
- Read tags in Teams – to read group tags in Microsoft Teams, optionally used for alerting specific groups of people to specific changes (used for ChangePilot Pro users only)
- Sign in and read user profile - Allows users to sign-in to ChangePilot (used for ChangePilot Pro users only)
To review and/or accept the ChangePilot permissions, click here.