Skip to main content

How to Add Permissions Required For MSGraph

Minimum Permissions

Least-Privilege Permission Set

TaskPermission RequiredTypeScope / Notes
Upload files to a specific siteSites.SelectedApplicationGives access to only sites you want the application to write to (Required an additional Step listed below)
Delete files on that specific siteSites.SelectedApplicationDeleting Files from Sharepoint from the iMIS interface.
Create / manage email category definitionsMailboxSettings.ReadWriteApplicationUsed for Assigning and Creating categories. (Only Required if using Categories)
Assign a category to a specific emailMail.ReadWriteApplicationRequired to modify the categories property on a message
Read email (Subject, Body, To, From, CC, Attachments, mailbox owner)Mail.ReadWriteApplicationMail.Read alone would suffice in isolation, but is redundant once Mail.ReadWrite is already required above.

Minimum Permissions Required

PermissionTypeCovers
Sites.SelectedApplicationFile upload + delete, scoped to a single SharePoint site
MailboxSettings.ReadWriteApplicationCreating and editing email category definitions
Mail.ReadWriteApplicationFull email reading + assigning categories to messages