AvePoint Docs
Graph API
My support tickets
Graph API
My support tickets
English

    Home > Manage Apps > Manage App Profiles for Microsoft Tenants > API Permissions Required by Default AvePoint Apps for Microsoft Tenants > Microsoft 365 (All Permissions)

    Export to PDF

    Microsoft 365 (All Permissions)

    The Microsoft 365 (All permissions) app profile can be used by the following services:

    - Cense - Classic DocAve Backup - Cloud Archiving - Cloud Backup for Microsoft 365 - Cloud Governance - Cloud Index - Cloud Insights - Cloud Management - Opus - Insights - Policies for Microsoft 365

    Once you create a Microsoft 365 (All permissions) app profile in AvePoint Online Services, the AvePoint Online Services Administration forMicrosoft365 app will be automatically set up in your Microsoft Entra ID.

    The table below lists the permissions that should be accepted when you authorize the AvePoint Online Services Administration forMicrosoft365 app.

    APIPermissionTypePurposeIs newly required?
    SharePoint/Office 365 SharePoint OnlineSites.FullControl.All(Have full control of all site collections)ApplicationRetrieve information of SharePoint Online site collections that are scanned by Auto discovery.No
    SharePoint/Office 365 SharePoint OnlineUser.ReadWrite.All(Read and write user profiles)ApplicationRetrieve information of Microsoft 365 user profiles related to OneDrive that are scanned by Auto discovery.No
    SharePoint/Office 365 SharePoint OnlineTermStore.ReadWrite.All(Read and write managed metadata)ApplicationBack up and restore Managed Metadata Service of SharePoint Online site collections and Microsoft 365 Group team sites.No
    Office 365 Exchange Onlinefull_access_as_app(Use Exchange Web Services with full access to all mailboxes)ApplicationRetrieve information of Exchange Online mailboxes and Microsoft 365 Group mailboxes that are scanned by Auto discovery.No
    Office 365 Exchange OnlineExchange.ManageAsApp(Manage Exchange As Application)ApplicationScan in-place archived mailboxes.No
    Office 365 Management APIsActivityFeed.Read(Read activity data for your organization)ApplicationRetrieve activity data in your organization to generate reports in AvePoint Cloud Insights.No
    Microsoft GraphChannel.ReadBasic.All(Read the names and descriptions of all channels)ApplicationScan Microsoft Teams via Auto discovery.No
    Microsoft GraphUser.Read(Sign in and read user profile)DelegatedSupport signing into AvePoint Online Services with Microsoft 365 accounts.No
    Microsoft GraphGroup.ReadWrite.All(Read and write all groups)ApplicationScan Microsoft 365 Groups and Microsoft Teams via Auto discovery.No
    Microsoft GraphGroup.ReadWrite.All(Read and write all groups)ApplicationBack up and restore Microsoft Teams and Microsoft 365 Groups data.No
    Microsoft GraphDirectory.Read.All(Read directory data)ApplicationRetrieve your Microsoft 365 tenant information.No
    Microsoft GraphSites.ReadWrite.All(Read and write items in all site collections)ApplicationBack up and restore Microsoft Teams, Microsoft 365 Groups, and OneDrive data.No
    Microsoft GraphSites.Read.All(Read items in all site collections [preview])ApplicationBack up and restore Microsoft Teams and Microsoft 365 Groups data.No
    Microsoft GraphReports.Read.All(Read all usage reports)ApplicationAvePoint Cloud Backup for Microsoft 365 can retrieve data size directly, which improves the efficiency of the Subscription Consumption Report.No
    Microsoft GraphChannelMember.ReadWrite.All(Add and remove members from all channels)ApplicationCloud Backup for Microsoft 365 uses it to back up and restore the members and messages of Teams private channels.No
    Microsoft GraphChannelMember.ReadWrite.All(Add and remove members from all channels)ApplicationInsights uses it to retrieve private channel members.No
    Microsoft GraphChannelMember.ReadWrite.All(Add and remove members from all channels)ApplicationPolicies for Microsoft 365 uses it to read all channel members.No
    Microsoft GraphChannelMessage.Read.All(Read all channel messages)ApplicationBack up and restore the members and messages of Teams private channels.No
    Microsoft GraphTasks.ReadWrite.All (Read and write all users’ tasks and task lists)ApplicationBackup up and restore Planner data.No
    Microsoft GraphChannelSettings.ReadWrite.All(Read and write the names, descriptions, and settings of all channels)ApplicationRequired by the restore jobs of Teams service.No
    Microsoft GraphChannelSettings.ReadWrite.All(Read and write the names, descriptions, and settings of all channels)ApplicationInsights can retrieve information of channels in Teams.No
    Microsoft GraphUser.Read.All(Read all users' full profiles)ApplicationRetrieves and displays user photos and user basic information.No
    Microsoft GraphUser.ReadWrite.All(Read and write all users’ full profiles)ApplicationIt allows users to remove or block external users in Insights.No
    Microsoft GraphAuditLog.Read.All(Read all audit log data)ApplicationInsights uses it to retrieve the last sign-in time of external users.No
    Microsoft GraphTeamSettings.ReadWrite.All(Read and change all teams' settings)ApplicationInsights can retrieve information of teams.No
    Microsoft GraphTeamSettings.ReadWrite.All(Read and change all teams' settings)ApplicationCloud Backup for Microsoft 365 uses it to back up and restore teams’ settings.No
    Microsoft GraphFiles.Read.All(Read files in all site collections)ApplicationRetrieve URLs of channels in Teams or read files in Teams channels to support products’ functionalities.No
    Microsoft GraphTeamMember.ReadWrite.All(Add and remove members from teams)ApplicationInsights can retrieve and manage members in your Teams.No
    Microsoft GraphTeamMember.ReadWrite.All(Add and remove members from teams)ApplicationCloud Backup for Microsoft 365 uses it to back up and restore teams’ members.No
    Microsoft GraphTeamsTab.ReadWrite.All(Read and write tabs in Microsoft Teams)ApplicationCloud Backup for Microsoft 365 uses it to back up and restore teams’ tabs.No
    Microsoft GraphTeam.Create(Create teams)ApplicationCloud Backup for Microsoft 365 uses it to restore teams.No
    Microsoft GraphTeamsAppInstallation.ReadWriteForTeam.All(Manage Teams apps for all teams)ApplicationCloud Backup for Microsoft 365 uses it to back up and restore teams’ apps.No
    Microsoft GraphChannel.Create(Create channels)ApplicationCloud Backup for Microsoft 365 uses it to restore teams’ channels.No
    Microsoft GraphInformationProtectionPolicy.Read.All(Read all published labels and label policies for an organization.)ApplicationInsights uses it to retrieve sensitivity labels from Microsoft 365.No
    Microsoft GraphChat.Read.All(Read all chat messages)ApplicationCloud Backup for Microsoft 365 uses it to back up Microsoft Teams Chat.No
    Microsoft GraphFiles.ReadWrite.All(Read and write files in all site collections)ApplicationCloud Backup for Microsoft 365 uses it to back up and restore the OneDrive files.No
    Microsoft GraphSites.Manage.All(Create, edit, and delete items and lists in all site collections)ApplicationCloud Backup for Microsoft 365 uses it to back up and restore the OneDrive files.No
    Microsoft GraphSites.FullControl.All(Have full control of all site collections)ApplicationCloud Backup for Microsoft 365 uses it to back up some files in specific conditions, such as DLP-sensitive files.No
    Microsoft Information Protection Sync ServiceUnifiedPolicy.Tenant.Read(Read all unified policies of the tenant)ApplicationInsights can retrieve information of published sensitivity labels from Microsoft 365.No