Home > Manage App Profiles > API Permissions Required by AvePoint Apps > Apps for Individual Services > Cloud Backup for Microsoft 365 > Cloud Backup Express
Export to PDFWhen you create a Cloud Backup Express app profile in AvePoint Online Services, the AvePoint Cloud Backup Express app will be automatically set up in your Microsoft Entra ID.
The table below lists the permissions that should be accepted when you authorize the AvePoint Cloud Backup Express app.
*Note: When creating the Cloud Backup Express app profile, the consent user must be a Microsoft 365 Global Administrator. To re-authorize the Cloud Backup Express app, the consent us must have the Microsoft 365 Backup Administrator role.
| API | Permission | Type | Purpose | Last update |
|---|---|---|---|---|
| Office 365 Exchange Online | Exchange.ManageAsApp(Manage Exchange as Application) | Application | Scan mailboxes. | |
| SharePoint/Office 365 SharePoint Online | Sites.FullControl.All(Have full control of all site collections) | Application | Scan SharePoint Online site collections. | |
| SharePoint/Office 365 SharePoint Online | User.Read.All(Read all users' full profiles) | Application | Retrieve the Microsoft 365 Users’ user profiles. | |
| Microsoft Graph | BackupRestore-Configuration.ReadWrite.All(Read and edit all backup configuration policies) | Application | Update backup settings and trigger backup jobs in Microsoft 365. | |
| Microsoft Graph | BackupRestore-Restore.ReadWrite.All(Read all restore sessions and start restore sessions from backups) | Application | Perform data recovery. | |
| Microsoft Graph | BackupRestore-Search.Read.All(Search for metadata properties in all backup snapshots) | Application | Retrieve recovery points. | |
| Microsoft Graph | Directory.Read.All(Read directory data) | Application | Retrieve users and Groups. | |
| Microsoft Graph | User.Read.All(Read all users' full profiles) | Application | Read and list users for the sync of recovery points. | |
| Microsoft Graph | Sites.Read.All(Read items in all site collections) | Application | Read and list sites for the sync of recovery points. | |
| Microsoft Graph | Group.Read.All(Read all groups) | Application | Scan Microsoft 365 Groups and Teams. | April 2024 |
| Microsoft Graph | Reports.Read.All(Read all usage reports) | Application | Retrieve Microsoft 365 data size. | April 2024 |
| Microsoft Graph | BackupRestore-Control.ReadWrite.All(Manage backup controller) | Delegated | Manage app for bill consuming and enable backup service. | August 2024 |