Application information for iGlobe CRM Office 365 for Microsoft 365

Publisher Attestation: The information on this page is based on a self-assessment report provided by the app developer on the security, compliance, and data handling practices followed by this app. Microsoft makes no guarantees regarding the accuracy of the information.

Last updated by the developer on: June 22, 2021

General information

Information provided by iGlobe to Microsoft:

Information Response
App name iGlobe CRM Office 365 for Microsoft 365
ID 17859280.iglobecrmoffice365
Partner company name iGlobe
URL of partner website https://www.iglobecrm.com
URL of Privacy Policy https://www.iglobecrm.com/content/legal-information
URL of Terms of Use https://iglobecrm.com/content/iglobe-crm-office-365-end-use...

Questions

Questions or updates to any of the information you see here? Contact us!

How the app handles data

This information has been provided by iGlobe about how this app collects and stores organizational data and the control that your organization will have over the data the app collects.

Data access using Microsoft Graph

List any Microsoft Graph permissions this app requires.

Permission Type of permission (Delegated/Application) Is data collected? Justification for collecting it? Is data stored? Justification for storing it? Microsoft Entra App ID
Calendars.ReadWrite delegated No data is stored in application databases. Have access to user calendars when dreating a meeting report from the canlendar in to iGlobe 0bb1641a-3b3b-47f7-a11e-01279d92abfb
Contacts.ReadWrite delegated Directory.AccessAsUser.All Allows the app to have the same access to information in the directory as the signed-in user. 0bb1641a-3b3b-47f7-a11e-01279d92abfb
Directory.Read.All delegated No data is stored in application databases. Check for permission and to get the Sites and lists. Create folders, get files and save files. 0bb1641a-3b3b-47f7-a11e-01279d92abfb
Directory.ReadWrite.All delegated No data is stored in application databases. Allows the app to have the same access to information in the directory as the signed-in user. 0bb1641a-3b3b-47f7-a11e-01279d92abfb
Files.ReadWrite.All delegated No data is stored in application databases. Read, Update, Create Panner Tasks, Read the users recent and Shared files, To get SharePoint list, libraries and files. To save files and data to SharePoint lists. 0bb1641a-3b3b-47f7-a11e-01279d92abfb
Group.Read.All delegated No data is stored in application databases. Read, Update, Create Panner Tasks, Read the users recent and Shared files, To get SharePoint list, libraries and files. To save files to SharePoint lists. 0bb1641a-3b3b-47f7-a11e-01279d92abfb
Group.ReadWrite.All delegated No data is stored in application databases. Read, Update, Create Panner Tasks, Read the users recent and Shared files, To get SharePoint list, libraries and files. To save files to SharePoint lists. Integration to iGlobe CRM Office 365 0bb1641a-3b3b-47f7-a11e-01279d92abfb
Mail.ReadWrite delegated No data is stored in application databases. Svae the eamil to iGlobe CRM and get informatiopn from iGlobe to a new e-amil 0bb1641a-3b3b-47f7-a11e-01279d92abfb
Sites.Manage.All delegated No data is stored in application databases. Create, edit, and delete items and lists in iGlobe CRM 0bb1641a-3b3b-47f7-a11e-01279d92abfb
Sites.Read.All delegated No data is stored in application databases. Read items in iGlobe CRM 0bb1641a-3b3b-47f7-a11e-01279d92abfb
Sites.ReadWrite.All delegated No data is stored in application databases. Edit, and delete items and lists in iGlobe CRM 0bb1641a-3b3b-47f7-a11e-01279d92abfb
Tasks.ReadWrite delegated No data is stored in application databases. Create planner task from iGlobe CRM 0bb1641a-3b3b-47f7-a11e-01279d92abfb
User.Read delegated No data is stored in application databases. To get information the of iGlobe CRM for the speficic user 0bb1641a-3b3b-47f7-a11e-01279d92abfb

Data access using other Microsoft APIs

Apps and add-ins built on Microsoft 365 may use additional Microsoft APIs other than Microsoft Graph to collect or process organizational identifiable information (OII). List any Microsoft APIs other than Microsoft Graph this app uses.

API Is OII collected? What OII is Collected? Justification for collecting OII? Is OII stored? Justification for storing OII?
Exchange - Calendars.ReadWrite.All No
Exchange - Mail.Read.All No
Exchange - Contacts.Read No
Exchange - EWS.AccessAsUser.All No
Exchange - Tasks.ReadWrite No
SharePoint - AllSites.Manage No
SharePoint - AllSites.Read No
SharePoint -AllSites.Write No
SharePoint - MyFiles.Write No
SharePoint - Sites.Manage.All No
SharePoint - Sites.Read.All No
SharePoint - Sites.ReadWrite.All No
SharePoint - Sites.Search.All No
SharePoint - TermStore.Read.All No
SharePoint - TermStore.ReadWrite.All No

Non-Microsoft services used

If the app transfers or shares organizational data with non-Microsoft service, list the non-Microsoft service the app uses, what data is transferred, and include a justification for why the app needs to transfer this information.

Non-Microsoft services are not used.

Telemetry data

Does any organizational identifiable information (OII) or end-user identifiable information (EUII) appear in this application's telemetry or logs? If yes, describe what data is stored and what are the retention and removal policies?

iGlobe collects data to operate effectively and provide you the best experiences with our products and service. For licensing: Data collected to administer your organization’s licensing account, such as when you deploy a Free Add-ins, create a trial subscription or purchase a subscription. Following information are collected.

  • For financial purpose: Company name and address
  • Subscribed users: username and email

Organizational controls for data stored by partner

Describe how organization's administrators can control their information in partner systems? e.g. deletion, retention, auditing, archiving, end-user policy, etc.

All data is on the customer's own tenant. No application data is stored. A modern add-in runs in a sandboxed browser, “out of process”. It interacts with users data by using Microsoft services. The add-in may only access the data with which the user is working.

Human review of organizational information

Are humans involved in reviewing or analyzing any organizational identifiable information (OII) data that is collected or stored by this app?

No

Questions

Questions or updates to any of the information you see here? Contact us!

Information from the Microsoft Cloud App Security catalog appears below.

View in a new tab

Questions

Questions or updates to any of the information you see here? Contact us!

Identity information

This information has been provided by iGlobe about how this app handles authentication, authorization, application registration best practices, and other Identity criteria.

Information Response
Do you integrate with Microsoft Identify Platform (Microsoft Entra ID)? Yes
Have you reviewed and complied with all applicable best practices outlined in the Microsoft identity platform integration checklist? Yes
Does your app use MSAL (Microsoft Authentication Library) for authentication? No
Does your app support Conditional Access policies? Yes
List the types of policies supported Security defaults and any other of the common policies like Block legacy authentication* Require MFA for administrators* Require MFA for Azure management* Require MFA for all users*
Does your app request least privilege permissions for your scenario? Yes
Does your app's statically registered permissions accurately reflect the permissions your app will request dynamically and incrementally? Yes
Does your app support multi-tenancy? Yes
Does your app have a confidential client? Yes
Do you own all of the redirect Unified Resource Identifier (URI) registered for your app? Yes
Does your app expose any web APIs? No
Does your app use preview APIs? No
Does your app use deprecated APIs? No

Questions

Questions or updates to any of the information you see here? Contact us!