Add and grant Microsoft Graph API permissions to your Microsoft™ Azure app registration so that the application can access SharePoint sites and sensitivity labels.
About this task
Application permissions allow the application to access Microsoft Graph APIs without a signed-in user. Admin consent is required before the application can use these permissions.
Procedure
-
In your app registration, select API permissions from the menu.
-
Click Add a permission.
-
Select Microsoft Graph.
-
Select Application permissions.
Attention: Select Application permissions, not Delegated permissions. Application permissions allow the application to run without a signed-in user.
-
Search for and select the following permissions:
- Sites.Read.All: Provides read access to all SharePoint sites, including document libraries and lists.
- SensitivityLabel.Read: Provides read access to configured sensitivity labels.
-
Click Add permissions.
-
On the API permissions page, click Grant admin consent for [Your Organization].
Important: Admin consent is required for application permissions. Without admin consent, the application cannot access Microsoft Graph APIs.
-
In the confirmation dialog, click Yes.
The Status column displays a green checkmark and the text Granted for [Your Organization] for each permission.