Lepaya App requires the following application permissions:

Permission	Description	We need this to...
Name: `GroupMember.Read.All`	Read group memberships Allows the app to read memberships and basic group properties for all groups without a signed-in user.	- retrieve the list of direct members of a group
Name: `User.Read.All`	Read all users' full profiles Allows the app to read the full set of profile properties, group membership, reports and managers of other users in your organization, without a signed-in user	- retrieve a member's information - list members in tenant
Name: `TeamsActivity.Send`	Send a teamwork activity to any user Allows the app to create new notifications in users' teamwork activity feeds without a signed in user. These notifications may not be discoverable or be held or governed by compliance policies.	- send an activity feed notification in the scope of a team - send an activity feed notification to a user - send an activity feed notification in scope of a chat
Name: `Application.Read.All`	Read applications Allows the app to read applications and service principals without a signed-in user.	- retrieve the properties and relationships of a servicePrincipal object (enterprise application ID of our app in the tenant's directory). - retrieve the list of appRoleAssignment (permissions) that have been granted to our service principal.

Required additional permissions for automated onboarding:

Permission	Description	We need this to...
Name: `Team.Create`	Create teams Create teams, without a signed-in user.	- create a team
Name: `Team.ReadBasic.All`	Get a list of all teams Get a list of all teams, without a signed-in user.	- retrieve a specified team
Name: `TeamSettings.ReadWrite.All`	Read and change all teams' settings Read and change all teams' settings, without a signed-in user.	- update a specified team
Name: `TeamMember.ReadWrite.All`	Add and remove members from all teams Add and remove members from all teams, without a signed-in user. Also allows changing a team member's role, for example from owner to non-owner.	- add multiple members in a single request to a team - retrieve a specified team members
Name: `TeamsAppInstallation. ReadWriteForTeam.All`	Manage Teams apps for all teams Allows the app to read, install, upgrade, and uninstall Teams apps in any team, without a signed-in user. Does not give the ability to read application-specific settings.	- install an app to a specified team
Name: `AppCatalog.Read.All`	Read all app catalogs Allows the app to read apps in the app catalogs without a signed-in user.	- list apps from the Microsoft Teams app catalog

FAQ

We know that giving permissions to a third party can be complicated, so we would like to address some frequently asked questions here:

Q: Can Lepaya read the learner's messages?

A: No, we can't read their messages, even if it's in a channel created by Lepaya.

Q: Can Lepaya send messages on behalf of the learners?

A: No! We can only send messages through Lepaya bot.

Q: Can Lepaya update personal information from the learners on Slack?

A: No.

Security and Compliance Information

Also, here are some links with our security and compliance information: