# Request and Grant Permissions to Azure APIs for the Azure App for SharePoint Online

Request and grant permissions to Azure APIs for the Azure app for SharePoint Online.

## Procedure

1. In the navigation pane, click API permissions.

2. Click Add a permission.

   The Request API permissions pane appears.

3. Select the following permissions, and then click Add permissions.

   Tile Name | Application Permission | Mandatory
   --- | --- | ---
   SharePoint | Sites.FullControl.All | Yes
   Microsoft Graph | Sites.FullControl.All | Yes
   Group.ReadWrite.All | Yes
   Directory.Read.All | Yes
   Application.ReadWrite.OwnedBy | Yes
   Policy.Read.All | Yes
   Reports.Read.All | No (needed only for reports)

4. Click Grant admin consent for tenant_name.

5. Click Yes.

*The Application.ReadWrite.OwnedBy permission is required for auto key rotation. If you want Metallic to auto rotate secret keys, then have this permission assigned.

If you choose to assign this permission to your Azure app, you may need to run this PowerShell command to add the Azure app as owner of itself:

    az ad app owner add --id <app-id> --owner-object-id <object-id>

Where: - `<app-id>`: The Application (client) ID of your Azure app (e.g., 062f19f5-9dbf-48fe-adf7-94539bd3fa8e) - `<object-id>`: The Object ID of your Azure app (e.g., 55f5965a-48bd-49ee-bcbd-21a55bd18af1)

×

Loading...