Home > Manage App Profiles > API Permissions Required by AvePoint Apps > Apps for Individual Services > AvePoint Opus
Export to PDFWhen you create an app profile for Opus in AvePoint Online Services, the AvePoint Opus app will be automatically set up in your Microsoft Entra ID.
The table below lists the permissions that should be accepted when you authorize the AvePoint Opus app.
| API | Permission | Type | Purpose |
|---|---|---|---|
| Microsoft Graph | Group.Read.All(Read all groups) | Application | Retrieve group information. |
| Microsoft Graph | Directory.Read.All(Read directory data) | Application | Retrieve your organization’s Microsoft Entra data. |
| Microsoft Graph | User.Read.All(Read all users’ full profiles) | Application | Retrieve user information. |
| Microsoft Graph | Reports.Read.All(Read all usage reports) | Application | Retrieve file size of your Microsoft 365 tenant.This permission will be required if you want to use the Discovery and Analysis functionality. |
| Office 365 Exchange Online | full_access_as_app(Use Exchange Web Services with full access to all mailboxes) | Application | Retrieve information of Exchange Online mailboxes and Microsoft 365 Group mailboxes. |
| Office 365 Exchange Online | Exchange.ManageAsApp(Manage Exchange as application) | Application | Retrieve mailbox data. |
| SharePoint/Office 365 SharePoint Online | User.Read.All(Read user profiles) | Delegate | Retrieve user information. |
| SharePoint/Office 365 SharePoint Online | Sites.FullControl.All(Have full control of all site collections) | Application | Retrieve and manage SharePoint objects. |
| SharePoint/Office 365 SharePoint Online | User.Read.All(Read user profiles) | Application | Retrieve user information. |
| SharePoint/Office 365 SharePoint Online | TermStore.ReadWrite.All(Read and write managed metadata) | Application | Retrieve, and synchronize terms to term store. |