Request and Grant Permissions to Azure APIs for the Azure App for SharePoint Online

Request and grant permissions to Azure APIs for the Azure app for SharePoint Online.

Procedure

1. In the navigation pane, click API permissions.

2. Click Add a permission.

   The Request API permissions pane appears.

3. Select the following permissions, and then click Add permissions.

   Tile Name	Application Permission	Mandatory
   SharePoint	Sites.FullControl.All	Yes
   Microsoft Graph	Sites.FullControl.All	Yes
   	Group.ReadWrite.All	Yes
   	Directory.Read.All	Yes
   	Application.ReadWrite.OwnedBy	Yes
   	Policy.Read.All	Yes
   	Reports.Read.All	No (needed only for reports)

4. Click Grant admin consent for tenant_name.

5. Click Yes.

*The Application.ReadWrite.OwnedBy permission is required for auto key rotation. If you want Metallic to auto rotate secret keys, then have this permission assigned.

If you choose to assign this permission to your Azure app, you may need to run this PowerShell command to add the Azure app as owner of itself:

az ad app owner add --id <app-id> --owner-object-id <object-id>

Where: - <app-id>: The Application (client) ID of your Azure app (e.g., 062f19f5-9dbf-48fe-adf7-94539bd3fa8e) - <object-id>: The Object ID of your Azure app (e.g., 55f5965a-48bd-49ee-bcbd-21a55bd18af1)