From 0e7d726d831b4be47d96b1db23c158572771c7ea Mon Sep 17 00:00:00 2001
From: beo3000 <pakabu@web.de>
Date: Wed, 6 May 2026 21:14:56 +0200
Subject: [PATCH] docs(scripts): document graph permissions for online meetings

---
 scripts/.env.example | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/scripts/.env.example b/scripts/.env.example
index 67be16a..38e3f98 100644
--- a/scripts/.env.example
+++ b/scripts/.env.example
@@ -2,5 +2,19 @@
 AZURE_TENANT_ID=your-tenant-id
 AZURE_CLIENT_ID=your-client-id
 AZURE_CLIENT_SECRET=your-client-secret
-# User whose calendar to read
+# User whose calendar/meetings to read
 AZURE_USER_EMAIL=your-email@company.com
+
+# Required Graph application permissions (admin-consent):
+#   Calendars.Read
+#   OnlineMeetings.Read.All        (transcript/recap/recording access)
+#   OnlineMeetingTranscript.Read.All
+#   OnlineMeetingArtifact.Read.All
+#
+# In addition, an Application Access Policy must grant the app access to
+# AZURE_USER_EMAIL's online meetings:
+#   New-CsApplicationAccessPolicy -Identity "obsidian-graph" -AppIds "<AZURE_CLIENT_ID>" -Description "..."
+#   Grant-CsApplicationAccessPolicy -PolicyName "obsidian-graph" -Identity "<AZURE_USER_EMAIL>"
+#
+# Beta endpoint (aiInsights / Copilot recap) requires Teams Premium / Copilot
+# license on the tenant.