#What Should I Do If the Sites.FullControl.All Permission Cannot be Added to My Custom App?

If the Sites.FullControl.All SharePoint API permission is not allowed by your organization’s security policy, you can add the Sites.Selected application permission as a replacement and refer to the steps below:

1. Configure your custom Azure app by referring to Create a Custom Azure App. When adding SharePoint API permissions, add the Sites.Selected permission instead of the Sites.FullControl.All permission. Ensure you click Grant admin consent for [Tenant name] to grant admin consent.

2. Specify which sites an app can access. For more information, refer to Specify Selected Sites via Graph Explorer.

3. Then, you can import these sites by referring to Import Objects in Batch.