---
sourceDocument: Australia Employee Service Management
sourceDocumentLink: https://www.servicenow.com/docs/r/pt-BR/employee-service-management

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Employee Service Management

ft:clusterId :

    - emplsm

bundleId :

    - emplsm

workflow :

    - Employee


---

# API permissions for Request-based chat and SSO

# ServiceNow for Microsoft Teams integration API permissions for Request-based chat and SSO {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 min. de leitura

Following are API permissions requested by the ServiceNow® integration with Microsoft Teams for Request-based chat and SSO.
{#request-based-chat-api-permissions__table_hjw_yqd_1sb__entry__3}

| App | API Permission | Description |
|:-|:-|:-|
| Request-Based Chat | Offline_access (delegated) (Application) | ServiceNow® stores an access token for each user, which allows them to re-authenticate with ServiceNow, within Microsoft Teams, without having to go through a login prompt. Offline access allows us to automatically refresh the access token. |
| Request-Based Chat | Chat.ReadWrite (delegated) | The Read part of the Chat.ReadWrite permission allows us to import request-based chats from Microsoft Teams. The Write part of the Chat.ReadWrite permission is used in the "Start Chat" screen, where an opening message is provided on behalf of the agent. |
| Request-Based Chat | User.Read (delegated) | This permission is automatically added whenever an app is created to read the basic information of the user like name, email-id. |
| Request-Based Chat | User.ReadBasic.All (delegated) | This permission is required to obtain the names and Microsoft Azure IDs of users. ServiceNow stores the Azure ID in order to create chats on behalf of users and import chats on their behalf. |
| Request-Based Chat | Files.Read.All (delegated) | This permission is used when importing request-based chats from Microsoft Teams. It allows attachments to be imported, as part of the Microsoft Teams chat. |
| Request-Based Chat | ChatMember.ReadWrite (delegated) | When a request with a Teams chat is set to inactive, participants are automatically removed from the corresponding chat. This permission is required to remove the chat participants. |
| Request-Based Chat | Chat.Create (delegated) | Permission used in the creation of reauthenticatequest-based chats. |
| Request-Based Chat | Chat.ReadBasic (delegated) | This permission is used when importing request-based chats. It allows us to display which participant sent each message in the chat. |
| Request-Based Chat | Presence.Read.All (Delegated) | This permission is used when starting a Microsoft Teams chat to get informed of the presence of each user who will be added to the chat. This allows users to know real time status of chat participants before adding them to the group chat. |
| Request-Based Chat | User.Read.All (Application) | This permission is used in Guest access feature, where a guest member can also start a chat. Microsoft does not allow a Guest Token (with delegated permission) to access the '/users' API end point. So, the Application permission is needed to fetch details of Microsoft Azure users and map the UPN with ServiceNow users. |
| Tab SSO | User.Read (delegated) | This permission enables the user to authenticate into a ServiceNow Portal embedded in Microsoft Teams. |
| Tab SSO | Offline_access (delegated) | This permission is required for the use of Tab SSO, to enable user authentication with a Microsoft Teams tab. |
| Tab SSO | openid (delegated) | This permission is required for accessing the ID tokens. |
| Tab SSO | email (delegated) | This permission is required to add the user's primary email address to the ID token. |
| Tab SSO | TeamsActivity.Send (delegated) | This permission is required to send a team work activity to user. |
| Tab SSO | profile (delegated) | This permission is required for giving the basic user details. |
[Tabela 1. API Permissions for Request-based chat and SSO]

{#request-based-chat-api-permissions__table_hjw_yqd_1sb}