permissions not visible
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 36%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESD%3C/text%3E%3C/svg%3E)
Sushil Dangi
0
Reputation points
Hi We tried creating app in Azure entra and our accound showed "CallRecords.Read.All" permission as application granted and we added it.
one of our clients is trying to configure same but they said they are not getting this permission. so is there any limitations or conditions here? please suggest what and all we need to check here and in what cases it wont appear. they said they have admin permisisons. Pls suggets all possible options clearly with doc support if possible.
if we dont add this permission, wil communications/callrecords subscription gets created or will it give any exception. is there any relationship between them?
please provide as much as possible .
thanks
Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(220.8, 92%, 31%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
Sridevi Machavarapu 2,780 Reputation points Microsoft External Staff Moderator2025-11-13T00:24:59.2966667+00:00 Hello Sushil Dangi,
The CallRecords.Read.All permission from Microsoft Graph is used to access Microsoft Teams call records. If it isn’t visible while adding permissions, the tenant likely doesn’t meet certain requirements.
Make sure the permission is added under Microsoft Graph → Application permissions.
It appears only in Microsoft 365 enterprise tenants with Teams enabled and valid licenses. It’s not available in developer, education, or government (GCC, GCC High, DoD, China, Germany) tenants.
The user must have Global Administrator rights, and tenant consent settings should allow granting Graph permissions. This permission is required to create or read call record subscriptions (/communications/callRecords). Without it, API requests will fail with a “403 – Insufficient privileges” error.
References:
- Working with the call records API in Microsoft Graph
- Microsoft Graph permission CallRecords.Read.All reference
Hope this helps! Feel free to reach out for any further queries.
Please upvote the comment if the provided information is helpful for you in any way.
Sign in to comment
Sign in to answer