The current list of default permissions is here. Basically the app can read and send the user's emails, and access Sharepoint and Teams. How my package currently works is that it obtains an OAuth ...