Thanks for your feedback.
Feedback?Webex Enterprise applications
Cisco Webex Identity Integration is an Entra ID enterprise application in Entra ID. The Wizard App connects to this application to access Entra ID graph APIs. The permissions required to access it are the minimum permissions that are needed to support and use it.
| Permission | Usage |
|---|---|
|
Read directory data |
Used to read information in an organization's directory such as users, groups, and applications.This is a delegated permission used on behalf of a signed in user for admin consent flow. |
|
Sign In and read user profile |
Used to read user details, roles, and to get an ID token for single sign-on. |
|
Manage apps that this app creates or owns |
Required to manage the Cisco Webex Identity app in Entra ID Enterprise, including:
|
|
Read all audit log data |
Used to access the Cisco Webex Identity provision audit log to read provisioning history. This information is used for the sync summary and sync report function in the Wizard App. |
|
Read domains |
Used to read and verify domain properties. |
|
Read all groups/Read all group memberships | Reads the list of groups from Entra ID to allow successful configuration of the groups sync scope. Updates to group memberships can take up to 12 hours to synchronize. If a new user hasn't auto-synced when the group synchronization occurs, you will need to wait another 12 hours for the new user to sync to their group. |
|
Read all company places |
Used to synchronize all rooms and locations in an organization. |
|
Read all users’ full profiles |
Used when adding users in the sync scope. For example, this permission allows the reading of user information by searching for a user and displaying the users in the table on the user page. |
If you already have set up a Cisco Webex Enterprise App in Entra ID, you can migrate all of your configurations over to the Entra ID Wizard App automatically. You'll need to grant the following permissions to the migration application.
|
Permission |
Usage |
|---|---|
|
Sign In and read user profile |
Used to read user details, roles, and to get an ID token for single sign-on. |
|
Read and write all applications |
Used to create, update, or delete a gallery application. |
|
Read directory data |
Used to read information in an organization's directory such as users, groups, and applications.This is a delegated permission used on behalf of a signed in user for admin consent flow. |
