Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. Cohesity Alta SaaS Protection Administrator's Guide
  3. API permissions
  4. App permissions of Web App
Cohesity Alta SaaS Protection Administrator's Guide

App permissions of Web App

The following optional claims are included in the access token. Cohesity Alta SaaS Protection uses an OpenID Connect-based authentication layer, where these claims support effective authentication and authorization, especially for SIEM integrations. These claims provide information about the user but do not grant additional access. They are required if a Web App is deployed.

Table:

API Name

Claim value

Permission

Description by Microsoft

Used by Cohesity Alta SaaS Protection

User.Read

User.Read

Delegated

Sign in and read the user profile.

To include in the access token.

profile

profile

Delegated

View users' basic profile.

To include in the access token.

openid

openid

Delegated

Sign users in.

To include in the access token.

offline_access

offline_access

Delegated

Maintain access to data you have given it access to.

To include in the access token.

Feedback

Was this page helpful?
Previous

API permissions for Entra ID

Next

What is a connector?

Feedback

Was this page helpful?