Scopes used from microsoft entra id

Scopes used from Microsoft Entra ID

Here are the scopes we request when syncing your Microsoft Entra ID with Scribe. Each scope is necessary for a specific function within the product.

Authentication and user profile

These scopes allow your coworkers to log in to Scribe with their Office 365 account. They provide read access to basic user profile information such as name and email.

• https://graph.microsoft.com/openid (Delegated)
• https://graph.microsoft.com/profile (Delegated)
• https://graph.microsoft.com/email (Delegated)

Administrative units

This scope lets Scribe read administrative units from your directory so we can create departments in Scribe.

• https://graph.microsoft.com/AdministrativeUnit.Read.All (Application)

Domains

This scope allows Scribe to read your domains and import them into your Scribe workspace.

• https://graph.microsoft.com/Domain.Read.All (Application)

Sign in and read user profile

This scope enables users to sign in and provides basic profile reading capabilities.

• https://graph.microsoft.com/User.Read (Delegated)

Read all users’ full profiles

This scope is required to sync all user profiles from your directory into Scribe.

• https://graph.microsoft.com/User.Read.All (Application)

Read all groups

This scope lets Scribe read group memberships from your directory.

• https://graph.microsoft.com/GroupMember.Read.All (Application)

Read all group memberships

This scope provides access to read all group information.

• https://graph.microsoft.com/Group.Read.All (Application)

Maintain access to data

This scope ensures that Scribe can maintain continuous access to the data you have authorized, without requiring you to re authenticate frequently.

• https://graph.microsoft.com/offline_access (Delegated)

What data we store in Scribe

From the scopes listed above, here is the data we actually store in Scribe:

• Profile picture
• First name
• Last name
• Job position
• Mobile phone
• Work phone
• Fax
• Department
• Office
• Street address
• City
• State or province
• Zip or postal code
• Country or region
• Group names and memberships
• Administrative unit names and memberships
• Domains hostname

Note: Scribe only reads data. We cannot edit data in your Microsoft 365 or read your emails. Scribe is SOC 2 Type II compliant.