Ultra Admin
Ultra Admin

Ultra Admin

Admin consent required, permissions set and maintained by you

What can I access? How are my user rights handled?

Actual user rights are respected in the application—if you can see it in Office 365, you can see it in sapio365, but in a much larger scope.

I'm an admin. How do I give consent to sapio365?

Admin and Ultra Admin sessions both require the consent of a Global Administrator in order to function. If you give consent once, it will work across your entire tenant.
See this page for the full process of providing admin consent for each of the session types.


How can I get admin consent for sapio365?

Only an administrator with the role of global administrator can provide consent for sapio365's Ultra Admin sessions. Feel free to send a global administrator to this page: How to provide admin consent to sapio365. If you have already registered an application ID, you'll need to tell which application ID you need consent for.

What can I access? How are my user rights handled?

Actual user rights are respected in the application—if you can see it in Office 365, you can see it in sapio365, but in a much larger scope.

What can I access in a Ultra Admin session?

Authorized users are responsible for assigning their own permissions when creating an application.

With the full set of Ytria-recommended permissions, you can access the following for analysis:

Users
  • View the entire user list for your tenant’s directory as well as all users' profile information.
  • View service plans and license information for all users.
  • Display group memberships for up to all users in your tenant’s directory.
  • See ALL the following for ANY NUMBER of users in your tenant:
    • Extended user information
    • Drive items
    • Messages
    • Contacts
    • Calendar entries
Groups
  • For ALL groups in your tenant
  • :
    • Display all group owners and members.
    • See extended group properties.
    • Retrieve all drive item information.
    • View group SharePoint site information.
Contacts
  • See all contacts for all users in your tenant’s directory.
Mail
  • For ALL mailboxes in your tenant’s directory:
    • View all messages—including the mail folder structure.
    • Preview messages directly from the full message list.
    • Retrieve all attachments and related information for all messages.
    • See all message properties.
    • Retrieve all mailbox settings for all mailboxes.
    • Access all attachment information—and download or delete attachments directly.

Calendar events
  • For ALL mailboxes in your tenant’s directory:
    • View all calendar events.
SharePoint sites and lists
  • See all sites in your tenant and view:
    • All lists and their list items.
    • All drive items for up to all sites and lists at once.
    • All column information for up to all sites and lists at once.
OneDrive files and folders
  • Access all OneDrive files and see all property and permission information.