Planet eStream Support

Microsoft Graph API Setup Guidance

Introduction

The Microsoft Graph API is used to support integrated features with Microsoft Azure and Office products in Planet eStream.

This guide includes steps on how to setup the Graph API within Planet eStream and also an overview of the API permissions required. Please note you only have to enable the API permissions that are required for the features of Planet eStream you want to use.

For information on setting up Azure / Office 365 Single Sign On in Planet eStream read the Azure and Office 365 Installation article

Setup Guide

To setup the integration a system administrator will need to setup a Client ID and Secret in the Microsoft Azure Portal App Registations interface.

Once this has been setup please go to the Planet eStream Administration Console > External Integrations and Services > Microsoft Online Services. You will need the following details:

  • Tenant ID
  • Client ID
  • Client Secret

Please note for those sites that have already setup the Azure / Office 365 Single Sign On, some of these values may already be present.

API Permissions Overview
Permission Type Planet eStream Usage
Calendars.Read Delegated Digital Signage, Media Library
Calendars.ReadWrite Delegated Media Library
Directory.Read.All Delegated Administration
Directory.Read.All Application Administration
email Delegated All Modules
offline_access Delegated All Modules
Group.Read.All Delegated All Modules
Group.Read.All Application Administration, Media Library
OnlineMeetings.Read Delegated Media Library
OnlineMeetings.ReadWrite Delegated Media Library
openid Delegated Sign In
profile Delegated Sign In
User.Read Delegated Sign In
User.Read.All Delegated Sign In
User.Read.All Application Administration
User.ReadBasic.All Delegated Sign In
Calendars.ReadWrite Application Media Library, Room Capture
Files.Read.All* Delegated Media Library
Sites.Read.All** Application Media Library

*Required to allow users logging in with Microsoft O365 accounts to import recordings of meetings from Microsoft Teams

**Required for users logging in via SSO (for example SAML) and the Planet eStream Teams Plugin to be able to import recordings of meetings from Microsoft Teams

To simplify setup, the following JSON code can be added to your Azure AD app manifest file replacing the requiredResourceAccess section:

    	"requiredResourceAccess": [
		{
			"resourceAppId": "00000002-0000-0000-c000-000000000000",
			"resourceAccess": [
				{
					"id": "a42657d6-7f20-40e3-b6f0-cee03008a62a",
					"type": "Scope"
				},
				{
					"id": "5778995a-e1bf-45b8-affa-663a9f3f4d04",
					"type": "Scope"
				},
				{
					"id": "311a71cc-e848-46a1-bdf8-97ff7156d8e6",
					"type": "Scope"
				},
				{
					"id": "5778995a-e1bf-45b8-affa-663a9f3f4d04",
					"type": "Role"
				}
			]
		},
		{
			"resourceAppId": "00000003-0000-0000-c000-000000000000",
			"resourceAccess": [
				{
					"id": "64a6cdd6-aab1-4aaf-94b8-3cc8405e90d0",
					"type": "Scope"
				},
				{
					"id": "7427e0e9-2fba-42fe-b0c0-848c9e6a8182",
					"type": "Scope"
				},
				{
					"id": "37f7f235-527c-4136-accd-4a02d197296e",
					"type": "Scope"
				},
				{
					"id": "14dad69e-099b-42c9-810b-d002981feec1",
					"type": "Scope"
				},
				{
					"id": "465a38f9-76ea-45b9-9f34-9e8b0d4b0b42",
					"type": "Scope"
				},
				{
					"id": "1ec239c2-d7c9-4623-a91a-a9775856bb36",
					"type": "Scope"
				},
				{
					"id": "06da0dbc-49e2-44d2-8312-53f166ab848a",
					"type": "Scope"
				},
				{
					"id": "5f8c59db-677d-491f-a6b8-5f174b11ec1d",
					"type": "Scope"
				},
				{
					"id": "9be106e1-f4e3-4df5-bdff-e4bc531cbe43",
					"type": "Scope"
				},
				{
					"id": "a65f2972-a4f8-4f5e-afd7-69ccb046d5dc",
					"type": "Scope"
				},
				{
					"id": "e1fe6dd8-ba31-4d61-89e7-88639da4683d",
					"type": "Scope"
				},
				{
					"id": "a154be20-db9c-4678-8ab7-66f6cc099a59",
					"type": "Scope"
				},
				{
					"id": "b340eb25-3456-403f-be2f-af7a0d370277",
					"type": "Scope"
				},
				{
					"id": "7ab1d382-f21e-4acd-a863-ba3e13f7da61",
					"type": "Role"
				},
				{
					"id": "5b567255-7703-4780-807c-7be8301ae99b",
					"type": "Role"
				},
				{
					"id": "df021288-bdef-4463-88db-98f22de89214",
					"type": "Role"
				}
			]
		}
	],

Once replaced, return to the "API Permissons" section where the permissions will have been updated. Please select the "Grant Admin Consent" option to complete.