CQL
Call Quality Lens
Customer Portal

Call Quality Lens

Sign in to your Teams call quality portal to view tenant health, call quality trends and tenant settings.

Use the Microsoft work account for your organisation. Customer data remains tenant-isolated and governed by your CQL agreement.

Hosted at portal.cqlens.colevalleyconsulting.co.uk for customer access.

Ingestion live
Last record: 00:42s ago
Signed in

Tenant health

Live + last 7 days vs trailing 30-day baseline · updated 12 min ago
Loading callRecords quality data
Dashboard metrics render from expanded Graph callRecords using sessions, segments, media, deviceInfo, networkInfo and mediaStream fields.
Awaiting the active data provider.
Range Entity Severity
📞 Calling
Healthy
0
Setup success
100.0%
Audio poor %
0.0%
📹 Camera video
Healthy
0
Setup success
100.0%
Video poor %
0.0%
📅 Meetings
Degraded
0
Join success
100.0%
Meeting poor %
0.0%
🖥️ Screen share (VBSS)
Degraded
0
Start success
80.0%
VBSS poor %
20.0%
🗂️ App sharing
Healthy
0
Start success
100.0%
App poor %
0.0%
🏢 Rooms
Healthy
0
Rooms healthy
21/24
Worst room
31% poor
On Wi-Fi
1
Overall quality score
0/100
Awaiting callRecords
Users monitored (7d)
0
Rooms monitored (7d)
0
Shared devices monitored (7d)
0
Rate-my-call
4.2★
▼ 0.3 · top token “Echo” ×41

Call quality distribution

CQD stream classification · awaiting callRecords
  • ✅ Good0.0% · 0
  • ❌ Poor0.0% · 0
  • ❓ Unclassified0.0% · 0

Where is the problem?

Poor streams by attributed cause · 7 days
Awaiting data
0

Top affected entities

Worst poor-rate first
EntityTypePoor rateStatusTop cause
Awaiting dataTenant0%HealthyNone
Status thresholds: Critical ≥20% poor rate · Degraded 5–19% · Healthy <5%
Scoped monitoring diagnostics will appear here.

Recent quality events

Last 5 calls with issues · Most recent first
Awaiting data
Recent events render from poor media streams in the active callRecords payload.

28-day quality heatmap

Quality rate by day

Tenant Settings

Contoso · VIP groups, sites, Graph permissions, notifications, privacy and billing

🌐 Network topology

Upload subnet-to-site mapping (matches CQD building data format). Maps call records to physical locations for site-level analysis.
CSV format: Subnet,SiteName,BuildingName,City,Country

No network topology uploaded. Upload a CSV to enable site-level analysis in the Issue Explorer.

Future uploads

Additional data sets planned for enrichment.
Data set
Format
Status
📶 Wi-Fi APs / BSSIDs
CSV (vendor-exported)
Coming soon

Connected data sources

Architecture reference data for the Microsoft sources used by CQL
SourceStatusLast sync
Teams call recordsConnectedLive, change notifications (< 1 min lag)
PresenceConnectedOn demand per VIP detail page
Service healthConnectedPolled every 15 min
Directory and GroupsConnectedDelta sync every 5 min
Intune managed devicesConnectedOn roster sync
Azure OpenAIConnectedOn demand narrative generation
Stack is intentionally locked to Microsoft Graph, Microsoft Intune and Azure OpenAI. ServiceNow, Cisco DNA, Zscaler, NetBox and Aruba remain out of scope.

Data governance and retention

Reference policies for uploaded and derived data
  • Storage regionUK South, tenant-isolated, encrypted at rest (CMK)
  • Used forEnrichment of your tenant call records only, never shared cross-tenant
  • RetentionActive until superseded, archived versions kept 90 days for rollback
  • Audit logAll uploads logged with user, timestamp and file hash
  • Right to deletionHard-delete on demand, purged from analytics within 24h
  • ComplianceSOC 2 Type II, ISO 27001, UK GDPR DPA available on request

Microsoft Graph application permissions

Reference list for the Graph permissions required by CQL
Permission
Purpose
Status
CallRecords.Read.All
Call quality telemetry ingestion
Granted
GroupMember.Read.All
VIP roster sync
Granted
User.Read.All
User context and org structure
Granted
Calendars.Read
Predictive risk, scoped via app access policy
Scoped
Presence.Read.All
Live VIP presence
Granted
ServiceHealth.Read.All
Microsoft 365 service health correlation
Granted
ServiceMessage.Read.All
Service announcements and message center
Granted
DeviceManagementManagedDevices.Read.All
Intune device context
Granted
DeviceManagementConfiguration.Read.All
Change correlation for Intune policies
Granted
AuditLog.Read.All
Sign-in correlation and audit lookups
Pending consent
Directory.Read.All
Org chart for blast radius scoring
Granted
Open admin-consent URL
Sourced from /servicePrincipals/{id}/oauth2PermissionGrants and /appRoleAssignedTo. CQL never writes. Re-consent is performed in Entra by a Global Administrator.

Notifications

Coming soon
Coming soon

Notification channels and routing rules will be available in a future update. CQL will support Teams channel webhooks, Teams chat messages and email via Microsoft Graph.

Azure OpenAI region and retention

AI model configuration for this tenant
Region pin
  • Prompt logging · No PII leaves your tenant regionOff
  • Retention · Configurable30 days
  • Model · Standard 20K TPMgpt-4.1-mini

Privacy and visibility

Data visibility controls for this tenant
  • Call content, transcripts, messagesNever read
Show meeting subjects in UI
When off, the UI shows the meeting ID only. Subjects are still fetched for AI prompts.
Enable audit log export
Representative front-end control until audit export settings are wired
Mask VIP names for non-admins
Names render as initials only for viewer-role accounts
  • AI data sharingNone. Not used for training.
  • Tenant data isolationPostgreSQL RLS + EF query filter
  • Encryption in transitTLS 1.2+