Home > Manage App Profiles > API Permissions Required by AvePoint Apps > Apps for Individual Services > Cloud Backup for Microsoft 365 > Cloud Backup for Microsoft 365 (Exchange Permissions)
Export to PDFWhen you create a Cloud Backup for Microsoft 365 (Exchange permissions) app profile in AvePoint Online Services, the AvePoint Cloud Backup forMicrosoft365 (Exchange Permissions) app will be automatically set up in your Microsoft Entra ID.
The table below lists the permissions that should be accepted when you authorize the AvePoint Cloud Backup for Microsoft365 (Exchange Permissions) app.
| API | Permission | Type | Purpose |
|---|---|---|---|
| Office 365 Exchange Online | full_access_as_app(Use Exchange Web Services with full access to all mailboxes) | Application | Scan, back up, and restore mailboxes. |
| Office 365 Exchange Online | Exchange.ManageAsApp(Manage Exchange As Application) | Application | Scan in-place archived mailboxes. |
| Windows Azure Active Directory | User.Read(Sign in and read user profile) | Delegated | Support signing into Cloud Backup for Microsoft 365 with Microsoft 365 accounts. |
| Microsoft Graph | MailboxSettings.Read(Read all user mailbox settings) | Application | Scan Exchange Online mailboxes. |
| Microsoft Graph | Directory.Read.All(Read directory data) | Application | Retrieve your Microsoft 365 tenant information. |
| Microsoft Graph | User.Read.All(Read all users' full profiles) | Application | Verify the impersonation accounts for Public Folders. |
| Microsoft Graph | Reports.Read.All(Read all usage reports) | Application | Retrieve data size directly, which improves the efficiency of the Subscription Report. |