Home > Manage App Profiles > API Permissions Required by AvePoint Apps > Apps for Individual Services > Cloud Governance > Cloud Governance for Exchange
Export to PDFWhen you create a Cloud Governance for Exchange app profile in AvePoint Online Services, the AvePoint Cloud Governance Exchange App will be automatically set up in your Microsoft Entra ID.
The table below lists the permissions that should be accepted when you authorize the AvePoint Cloud Governance Exchange App.
| API | Permission | Type | Purpose |
|---|---|---|---|
| Microsoft Graph | User.Read(Sign in and read user profile) | Delegated | Search for users and retrieve user information. |
| Office 365 Exchange Online | full_access_as_app(Use Exchange Web Services with full access to all mailboxes) | Application | Create Microsoft 365 Groups/teams and update their properties. |
| Office 365 Exchange Online | Exchange.ManageAsApp(Manage Exchange as application) | Application | Provision and manage shared mailboxes, distribution lists, and mail-enabled security groups. Update Microsoft 365 Group properties. |