Hello,
When I go to set up MS365 integration as a Global Admin, I have to approve the Graph API permissions shown in the attachment.
The permissions aren't what I expect, for example, I want to save voicemails in SharePoint, but there is nothing about SharePoint. Instead it has "read and write applications", "manage app permission grants and app role assignments", and "manage all delegated permission grants".
We're a big company and there are lot of hoops to jump through for security, that is a lot of privilege for any Microsoft app registration. I'm trying to understand why it needs those permissions so I can explain it & get approved, or we come up with a workaround. For example, will this app registration then create additional app registrations for the systems it needs access to? Can I just skip to that part & create those app registrations manually for things like email, SharePoint? Any insight appreciated.
-Nick
When I go to set up MS365 integration as a Global Admin, I have to approve the Graph API permissions shown in the attachment.
The permissions aren't what I expect, for example, I want to save voicemails in SharePoint, but there is nothing about SharePoint. Instead it has "read and write applications", "manage app permission grants and app role assignments", and "manage all delegated permission grants".
We're a big company and there are lot of hoops to jump through for security, that is a lot of privilege for any Microsoft app registration. I'm trying to understand why it needs those permissions so I can explain it & get approved, or we come up with a workaround. For example, will this app registration then create additional app registrations for the systems it needs access to? Can I just skip to that part & create those app registrations manually for things like email, SharePoint? Any insight appreciated.
-Nick
