Introduction
The Microsoft Graph API is used to support integrated features with Microsoft Azure and Office products in Planet eStream.
This guide includes steps on how to setup the Graph API within Planet eStream and also an overview of the API permissions required.
Please note you only have to enable the API permissions that are required for the features of Planet eStream you want to use.
For information on setting up Azure / Office 365 Single Sign On in Planet eStream read the Azure and Office 365 Installation article
Setup Guide
To setup the integration a system administrator will need to setup a Client ID and Secret in the Microsoft Azure Portal App Registations interface.
Once this has been setup please go to the Planet eStream Administration Console > External Integrations and Services > Microsoft Online Services. You will need
the following details:
- Tenant ID
- Client ID
- Client Secret
Please note for those sites that have already setup the Azure / Office 365 Single Sign On, some of these values may already be present.
API Permissions Overview
Permission |
Type |
Planet eStream Usage |
Calendars.Read |
Delegated |
Digital Signage, Media Library |
Calendars.ReadWrite |
Delegated |
Media Library |
Directory.Read.All |
Delegated |
Administration |
Directory.Read.All |
Application |
Administration |
email |
Delegated |
All Modules |
offline_access |
Delegated |
All Modules |
Group.Read.All |
Delegated |
All Modules |
Group.Read.All |
Application |
Administration, Media Library |
OnlineMeetings.Read |
Delegated |
Media Library |
OnlineMeetings.ReadWrite |
Delegated |
Media Library |
openid |
Delegated |
Sign In |
profile |
Delegated |
Sign In |
User.Read |
Delegated |
Sign In |
User.Read.All |
Delegated |
Sign In |
User.Read.All |
Application |
Administration |
User.ReadBasic.All |
Delegated |
Sign In |
Calendars.ReadWrite |
Application |
Media Library, Room Capture |
Files.Read.All* |
Delegated |
Media Library |
Sites.Read.All** |
Application |
Media Library |
*Required to allow users logging in with Microsoft O365 accounts to import recordings of meetings from Microsoft Teams
**Required for users logging in via SSO (for example SAML) and the Planet eStream Teams Plugin to be able to import recordings of meetings from Microsoft Teams
To simplify setup, the following JSON code can be added to your Azure AD app manifest file replacing the requiredResourceAccess section:
"requiredResourceAccess": [
{
"resourceAppId": "00000002-0000-0000-c000-000000000000",
"resourceAccess": [
{
"id": "a42657d6-7f20-40e3-b6f0-cee03008a62a",
"type": "Scope"
},
{
"id": "5778995a-e1bf-45b8-affa-663a9f3f4d04",
"type": "Scope"
},
{
"id": "311a71cc-e848-46a1-bdf8-97ff7156d8e6",
"type": "Scope"
},
{
"id": "5778995a-e1bf-45b8-affa-663a9f3f4d04",
"type": "Role"
}
]
},
{
"resourceAppId": "00000003-0000-0000-c000-000000000000",
"resourceAccess": [
{
"id": "64a6cdd6-aab1-4aaf-94b8-3cc8405e90d0",
"type": "Scope"
},
{
"id": "7427e0e9-2fba-42fe-b0c0-848c9e6a8182",
"type": "Scope"
},
{
"id": "37f7f235-527c-4136-accd-4a02d197296e",
"type": "Scope"
},
{
"id": "14dad69e-099b-42c9-810b-d002981feec1",
"type": "Scope"
},
{
"id": "465a38f9-76ea-45b9-9f34-9e8b0d4b0b42",
"type": "Scope"
},
{
"id": "1ec239c2-d7c9-4623-a91a-a9775856bb36",
"type": "Scope"
},
{
"id": "06da0dbc-49e2-44d2-8312-53f166ab848a",
"type": "Scope"
},
{
"id": "5f8c59db-677d-491f-a6b8-5f174b11ec1d",
"type": "Scope"
},
{
"id": "9be106e1-f4e3-4df5-bdff-e4bc531cbe43",
"type": "Scope"
},
{
"id": "a65f2972-a4f8-4f5e-afd7-69ccb046d5dc",
"type": "Scope"
},
{
"id": "e1fe6dd8-ba31-4d61-89e7-88639da4683d",
"type": "Scope"
},
{
"id": "a154be20-db9c-4678-8ab7-66f6cc099a59",
"type": "Scope"
},
{
"id": "b340eb25-3456-403f-be2f-af7a0d370277",
"type": "Scope"
},
{
"id": "7ab1d382-f21e-4acd-a863-ba3e13f7da61",
"type": "Role"
},
{
"id": "5b567255-7703-4780-807c-7be8301ae99b",
"type": "Role"
},
{
"id": "df021288-bdef-4463-88db-98f22de89214",
"type": "Role"
}
]
}
],
Once replaced, return to the "API Permissons" section where the permissions will have been updated. Please select the "Grant Admin Consent" option to complete.