Cloud Backup Express

    When you create a Cloud Backup Express app profile in AvePoint Online Services, the AvePoint Cloud Backup Express app will be automatically set up in your Microsoft Entra ID.

    The table below lists the permissions that should be accepted when you authorize the AvePoint Cloud Backup Express app.

    *Note: When creating the Cloud Backup Express app profile, the consent user must be a Microsoft 365 Global Administrator. To re-authorize the Cloud Backup Express app, the consent us must have the Microsoft 365 Backup Administrator role.

    APIPermissionTypePurposeLast update
    Office 365 Exchange OnlineExchange.ManageAsApp(Manage Exchange as Application)ApplicationScan mailboxes.
    SharePoint/Office 365 SharePoint OnlineSites.FullControl.All(Have full control of all site collections)ApplicationScan SharePoint Online site collections.
    SharePoint/Office 365 SharePoint OnlineUser.Read.All(Read all users' full profiles)ApplicationRetrieve the Microsoft 365 Users’ user profiles.
    Microsoft GraphBackupRestore-Configuration.ReadWrite.All(Read and edit all backup configuration policies)ApplicationUpdate backup settings and trigger backup jobs in Microsoft 365.
    Microsoft GraphBackupRestore-Restore.ReadWrite.All(Read all restore sessions and start restore sessions from backups)ApplicationPerform data recovery.
    Microsoft GraphBackupRestore-Search.Read.All(Search for metadata properties in all backup snapshots)ApplicationRetrieve recovery points.
    Microsoft GraphDirectory.Read.All(Read directory data)ApplicationRetrieve users and Groups.
    Microsoft GraphUser.Read.All(Read all users' full profiles)ApplicationRead and list users for the sync of recovery points.
    Microsoft GraphSites.Read.All(Read items in all site collections)ApplicationRead and list sites for the sync of recovery points.
    Microsoft GraphGroup.Read.All(Read all groups)ApplicationScan Microsoft 365 Groups and Teams.April 2024
    Microsoft GraphReports.Read.All(Read all usage reports)ApplicationRetrieve Microsoft 365 data size.April 2024
    Microsoft GraphBackupRestore-Control.ReadWrite.All(Manage backup controller)DelegatedManage app for bill consuming and enable backup service.August 2024