Skip to main content

Permissions for Azure Active Directory application needed for using MS Graph as an import source (KIC 2.8 only)

Article # 3031220 - Page views: 1390


The chapter "Permissions for Azure Active Directory application" in the KofaxImportConnectorAdminitratorsGuide_EN.pdf for KIC 2.8 doesn't mention the API names correctly.

Note 1: the documented Exchange API permissions are not needed and have been removed from this article.

Note 2: These permissions are for the Resource Owner Password Credentials (ROPC) Grant since KIC 2.8 supported only this Grant method.  Newer versions of KIC support additional Grants.

Future releases of the documentation reflect these changes.



Here you can find the correct API names and the related Permission names. Please refer to the manual for additional steps.

API name Permission name Type
Microsoft Graph Mail.ReadWrite Delegated
Mail.ReadWrite.Shared Delegated
User.Read Delegated


Level of Complexity 



Applies to  

Product Version Build Environment Hardware
Kofax Import Connector 2.8.0.x      


Add any references to other internal or external articles


Article # 3031220