Home > Manage Apps > Manage App Profiles for Microsoft Tenants > API Permissions Required by Default AvePoint Apps for Microsoft Tenants > Microsoft 365 (SharePoint Online Permissions)
Export to PDFMicrosoft 365 (SharePoint Online Permissions)
The Microsoft 365 (SharePoint Online permissions) app profile can be used by the following services:
The Microsoft 365 (SharePoint Online permissions) app profile is for the AvePoint Online Services Administration forSharePoint app in your Microsoft Entra ID.
*Note: The Microsoft 365 (SharePoint Online permissions) app profile is unsupported to create new, but you can re-authorize the existing app profile in your AvePoint Online Services tenant when necessary.
The table below lists the permissions that should be accepted when you authorize the AvePoint Online Services Administration forSharePoint app.
| API | Permission | Type | Purpose | Is newly required? |
|---|---|---|---|---|
| SharePoint/Office 365 SharePoint Online | Sites.FullControl.All(Have full control of all site collections) | Application | Retrieve information of SharePoint Online site collections that are scanned by Auto discovery. | No |
| SharePoint/Office 365 SharePoint Online | User.ReadWrite.All(Read and write user profiles) | Application | Retrieve information of Microsoft 365 user profiles related to OneDrive that are scanned by Auto discovery. | No |
| SharePoint/Office 365 SharePoint Online | TermStore.ReadWrite.All(Read and write managed metadata) | Application | Back up and restore Managed Metadata Service of SharePoint Online site collections and Microsoft 365 Group team sites. | No |
| Office 365 Management APIs | ActivityFeed.Read(Read activity data for your organization) | Application | Retrieve activity data in your organization to generate reports in AvePoint Cloud Insights. | No |
| Microsoft Graph | User.Read(Sign in and read user profile) | Delegated | Support signing into AvePoint Online Services with Microsoft 365 accounts. | No |
| Microsoft Graph | Reports.Read.All(Read all usage reports) | Application | AvePoint Cloud Backup for Microsoft 365 can retrieve data size directly, which improves the efficiency of the Subscription Consumption Report. | No |
| Microsoft Graph | Directory.Read.All(Read directory data) | Application | Retrieve your Microsoft 365 tenant information. | No |
| Microsoft Information Protection Sync Service | UnifiedPolicy.Tenant.Read(Read all unified policies of the tenant.) | Application | Insights can retrieve information of published sensitivity labels from Microsoft 365. | No |