License Editions: For license details, see Plans & Pricing.
📝NOTE: The availability of this feature may be limited based on the license type, region, and other criteria. To access this feature, contact support.
When you register your Microsoft 365 tenant, Druva installs an app in Microsoft Entra ID. The app requests the API permissions in this article. A Global Administrator reviews and accepts them during registration.
Permission Types
Delegated: The app acts on behalf of the signed-in administrator.
Application: The app acts on its own, without a signed-in user.
Permissions Requested by the App
API | Permission | Type | Used for |
Microsoft Graph |
| Delegated | Reading Copilot agent packages |
Microsoft Graph |
| Application | Reading Copilot agent packages without a signed-in administrator |
Microsoft Graph |
| Delegated | Reading the profile of the signed-in administrator |
Microsoft Graph |
| Application | Reading user profiles, for example agent owners |
Power Platform API |
| Delegated | Running administrator actions on Copilot Studio |
Office 365 Management APIs |
| Application | Reading activity logs |
Dynamics CRM |
| Delegated | Accessing Dataverse in your Power Platform environments |
Permissions That Druva Does Not Get by Default
The app permissions give Druva access to the tenant. They do not give access to the data in each Power Platform environment. To back up and restore the agents in an environment, you must also add the Druva app as an application user in that environment. See Prerequisites for Copilot Agents protection.