Security

Melkoro reads license data through the Microsoft Graph API with two application permissions: Organization.Read.All and User.Read.All. Both are read-only. It cannot read mail, files, chats, or passwords, and it cannot change anything in a tenant.

Access is granted per tenant by a Microsoft admin-consent flow and can be revoked at any time from the Microsoft Entra admin center. Billing data you upload stays in your account and is never shared.