How to Add Permissions Required For MSGraph

Minimum Permissions

Least-Privilege Permission Set

Task	Permission Required	Type	Scope / Notes
Upload files to a specific site	`Sites.Selected`	Application	Gives access to only sites you want the application to write to (Required an additional Step listed below)
Delete files on that specific site	`Sites.Selected`	Application	Deleting Files from Sharepoint from the iMIS interface.
Create / manage email categories	`MailboxSettings.ReadWrite`	Application	Used for Assigning and Creating categories. (Only Required if using Categories)
Assign a category to a specific email	`Mail.ReadWrite`	Application	Required to modify the `categories` property on a message
Read email (Subject, Body, To, From, CC, Attachments, mailbox owner)	`Mail.ReadWrite`	Application	`Mail.Read` alone would suffice in isolation, but is redundant once `Mail.ReadWrite` is already required above.

Minimum Permissions Required

Permission	Type	Covers
`Sites.Selected`	Application	File upload + delete, scoped to a single SharePoint site, Or multiple.
`MailboxSettings.ReadWrite`	Application	Creating and editing email category definitions
`Mail.ReadWrite`	Application	Full email reading + assigning categories to messages

Additional Work For Sites.Selected

The below API call will need to be done for each Sharepoint Site you wish to use with the Zidebar Intergration. The Write setting is used for Creating / Deleting Files.

POST https://graph.microsoft.com/v1.0/sites/{site-id}/permissions
Content-Type: application/json

{
  "roles": ["write"],
  "grantedToIdentities": [
    {
      "application": {
        "id": "{app-client-id}",
        "displayName": "{app-display-name}"
      }
    }
  ]
}