Cloud Management Services for Microsoft 365

    Instructions….

    When you create a Cloud Management Services for Microsoft 365 app profile in AvePoint Online Services, the AvePoint Cloud Management Service forMicrosoft365 app will be automatically set up in your Microsoft Entra ID.

    The table below lists the permissions that should be accepted when you authorize the AvePoint Cloud Management Service for Microsoft365 app.

    APIPermissionTypePurpose
    Microsoft GraphUser.ReadWrite.All (Read and write all users' full profiles)ApplicationRetrieve and update user properties.
    Microsoft GraphGroup.ReadWrite.All (Read and write all groups)ApplicationCreate and manage groups/teams.
    Microsoft GraphDirectory.Read.All(Read directory data)ApplicationRetrieve information from your organization’s Active Directory.
    Microsoft GraphMember.Read.Hidden (Read all hidden memberships)ApplicationRead the members of a group/team with hidden membership.
    Office 365 Exchange Onlinefull_access_as_app(Use Exchange Web Services with full access to all mailboxes)ApplicationRetrieve information of Exchange Online mailboxes and Microsoft 365 Group mailboxes.
    Office 365 Exchange OnlineExchange.ManageAsApp(Manage Exchange as application)ApplicationAllow the backup and restore of mailbox data.
    SharePoint/Office 365 SharePoint OnlineUser.ReadWrite.All(Read and write all users’ full profiles)ApplicationRetrieve and update user properties from user profiles.
    SharePoint/Office 365 SharePoint OnlineTermStore.ReadWrite.All(Read and write managed metadata)ApplicationRetrieve term store information.
    SharePoint/Office 365 SharePoint OnlineSites.FullControl.All(Have full control of all site collections)ApplicationRetrieve and manage SharePoint objects.