Home > Manage Apps > Manage App Profiles for Microsoft Tenants > API Permissions Required by Default AvePoint Apps for Microsoft Tenants > Microsoft 365 (Exchange Permissions)
Export to PDFThe Microsoft 365 (Exchange permissions) app profile can be used by the following services:
The Microsoft 365 (Exchange permissions) app profile is for the AvePoint Online Services Administration forExchange app in your Microsoft Entra ID.
*Note: The Microsoft 365 (Exchange permissions) app profile is unsupported to create new, but you can re-authorize the existing app profile in your AvePoint Online Services tenant when necessary.
The table below lists the permissions that should be accepted when you authorize the AvePoint Online Services Administration forExchange app.
| API | Permission | Type | Purpose | Is newly required? |
|---|---|---|---|---|
| Office 365 Exchange Online | full_access_as_app(Use Exchange Web Services with full access to all mailboxes) | Application | Retrieve information of Exchange Online mailboxes and Microsoft 365 Group mailboxes that are scanned by Auto discovery. | No |
| Microsoft Graph | User.Read(Sign in and read user profile) | Delegated | Support signing into AvePoint Online Services with Microsoft 365 accounts. | No |
| Microsoft Graph | Reports.Read.All(Read all usage reports) | Application | AvePoint Cloud Backup for Microsoft 365 can retrieve data size directly, which improves the efficiency of the Subscription Consumption Report. | No |
| Microsoft Graph | Directory.Read.All(Read directory data) | Application | Retrieve your Microsoft 365 tenant information. | No |