Permission Breakdown for Zeit365 Registration

Zeit365 is a professional time tracking and project management application that integrates seamlessly with your Microsoft 365 environment to help you track work time, manage projects, and bill customers effectively. Here's why each permission is essential for the app to function properly:

Core Identity & Authentication

• - openid - Allows you to securely sign in with your Microsoft 365 account
• - profile - Displays your name and basic profile information in the app interface
• - offline_access - Keeps you logged in so you don't have to re-authenticate every time you use the app

User Management & Collaboration

• - User.Read - Reads your basic user profile to personalize your experience
• - User.ReadBasic.All - Displays colleague names and basic info when you collaborate on projects or assign time entries to team members

Team & Project Organization

• - Group.Read.All - Critical for Zeit365's core functionality: The app uses Microsoft 365 Groups to organize your customers and projects. When you create a customer in Zeit365, you link it to a Microsoft 365 Group, which:
• - Determines access control - Only members of the linked group can view that customer's time entries and project data
• - Provides customer branding - The group's profile picture becomes the customer's logo in Zeit365
• - Enables seamless collaboration - Your existing team structure in Microsoft 365 automatically applies to Zeit365
• - GroupMember.Read.All - Identifies who has access to which customer projects based on group membership, ensuring proper access control and privacy

Document & Workspace Integration

• - Sites.Read.All - Provides direct links to related SharePoint sites, Teams channels, and Microsoft 365 services for each customer group, so you can quickly access:
• - Customer documents and files
• - Team conversations and planning tools (Planner, OneNote)
• - Shared calendars and resources