Home > Grant tyGraph Restricted Access to All or Some of Your Tenant > Configure tyGraph Without FullControl Permissions
Download this articleConfigure tyGraph Without FullControl Permissions
Some organizations do not allow granting Sites.FullControl.All or other FullControl permissions to applications. In this scenario, you can create a custom Microsoft Entra ID application and grant only the permissions required for the reports you plan to use.
Complete the following steps:
-
Create a custom Azure app with delegated permissions. For details on creating an app in Microsoft Entra ID, refer to the instructions in Create a Custom Azure App.
-
Add the necessary API permissions to the app, and then select the permissions required for accessing specific reports. Refer to Permissions for App Authorization for details on the permissions required by each report.
-
Create a custom app profile in AvePoint Online Services and link the custom app. For more information, refer to Manage App Profiles for tyGraph.
-
Grant consent to the custom app. Follow the instructions in Consent to Custom Azure Apps.
-
Review the permissions required by the reports that you plan to use before removing any permissions from the custom app. Refer to Permissions for App Authorization for more information.
Some reports may not function if specific permissions are removed. For example, the Sites that I Own report requires the Sites.FullControl.All permission to retrieve site owners and users with Full Control access. If this permission is removed, the report will not return data.