# Azure AD App Registration (Application / Client Credentials flow)
AZURE_TENANT_ID=your-tenant-id
AZURE_CLIENT_ID=your-client-id
AZURE_CLIENT_SECRET=your-client-secret
# User whose calendar/meetings to read
AZURE_USER_EMAIL=your-email@company.com

# Required Graph application permissions (admin-consent):
#   Calendars.Read
#   OnlineMeetings.Read.All        (transcript/recap/recording access)
#   OnlineMeetingTranscript.Read.All
#   OnlineMeetingArtifact.Read.All
#
# In addition, an Application Access Policy must grant the app access to
# AZURE_USER_EMAIL's online meetings:
#   New-CsApplicationAccessPolicy -Identity "obsidian-graph" -AppIds "<AZURE_CLIENT_ID>" -Description "..."
#   Grant-CsApplicationAccessPolicy -PolicyName "obsidian-graph" -Identity "<AZURE_USER_EMAIL>"
#
# Beta endpoint (aiInsights / Copilot recap) requires Teams Premium / Copilot
# license on the tenant.