You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/communication-services/concepts/identity-model.md
+10-11Lines changed: 10 additions & 11 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -36,14 +36,14 @@ After a user identity is created, a user is granted with the capability to parti
36
36
37
37
An access token is a JSON Web Token (JWT) and has integrity protection. That is, its claims can't be changed after it's issued. So a manual change of properties such as identity, expiration, or scopes will invalidate the access token. If primitives are used with invalidated tokens, then access will be denied to the primitives. Azure Communication Services supports the following scopes for access tokens.
38
38
39
-
## Chat Tokens
40
-
Three types of chat tokens are supported. Permissions for each token are described below.
39
+
## Chat Token Scopes
40
+
Three types of chat token scopes are supported. Permissions for each token are described below.
@@ -60,13 +60,13 @@ Three types of chat tokens are supported. Permissions for each token are describ
60
60
|Send typing indicator | Y | Y | Y |
61
61
|Get participant for thread ID | Y | Y | Y |
62
62
63
-
## VoIP calling Tokens
64
-
Tow types of VoIP calling tokens are supported. Permissions for each token are described below.
65
-
-VoIP
66
-
-VoIP.join
63
+
## VoIP Token Scopes
64
+
Two types of VoIP token scopes are supported. Permissions for each token are described below.
65
+
-voip
66
+
-voip.join
67
67
68
-
|Capability / Token type| VoIP|VoIP.join |
69
-
|--------------------------|---|---|
68
+
|Capability / Token scope| voip|voip.join |
69
+
|---|---|---|
70
70
|Start a VoIP call | Y | N |
71
71
|Start a VoIP call in Virtual Rooms, when the user is already invited to the Room| Y | Y |
72
72
|Join an InProgress VoIP call | Y | Y |
@@ -75,7 +75,6 @@ Tow types of VoIP calling tokens are supported. Permissions for each token are d
75
75
|All other in call operations such as mute/unmute, screen share etc. in Virtual Rooms| Y | Determined by user role |
76
76
77
77
## Revoke or Update access token
78
-
Access token can be removed in a few ways.
79
78
- Azure Communication Services Identity library can be used to revoke an access token before its expiration time. Token revocation isn't immediate. It can take up to 15 minutes to propagate.
80
79
- The removal of an identity, resource, or subscription revokes all access tokens.
81
80
- If you want to remove a user's ability to access specific functionality, revoke all access tokens. Then issue a new access token that has a more limited set of scopes.
0 commit comments