AvePoint Knowledge Center
Request article
Contact support
Request article
Contact support
English

    Home > Manage App Profiles > API Permissions Required by AvePoint Apps > Apps for Individual Services > Fly > Fly Delegated App

    Export to PDF

    Fly Delegated App

    When you create an app profile for Fly delegated app in AvePoint Online Services, the AvePoint Fly Delegated App will be automatically set up in your Microsoft Entra ID.

    The table below lists the permissions that should be accepted when you authorize the AvePoint Fly Delegated App.

    APIPermissionPurpose
    Microsoft GraphRoleManagement.Read.Directory(Read directory RBAC settings)Retrieve Microsoft global groups.Check Service Account available roles.
    Microsoft GraphGroup.ReadWrite.All(Read and write all groups)Allow to create groups and read all group properties and memberships.Additionally, allow group owners to manage their groups and allow group members to update group content.
    Microsoft GraphDomain.Read.All(Read domains)Retrieve the Microsoft 365 tenant domain.
    Microsoft GraphUser.Read.All(Read all users' full profiles)Retrieve information of user profiles.
    Microsoft GraphChat.ReadWrite(Read and write user chat messages)Retrieve and migrate chat members / chat messages in Microsoft Teams Chat migrations.
    Microsoft GraphTeamsTab.ReadWriteForTeam(Allow the Teams app to manage all tabs in teams)Retrieve and migrate team tabs in Microsoft Teams migrations.
    Microsoft GraphTeamsAppInstallation.ReadWriteAndConsentForTeam(Manage installed Teams apps in teams)Read, install, upgrade, and uninstall Teams apps in Teams and manage Teams access permissions.
    Microsoft GraphTeamSettings.ReadWrite.All(Read and change teams’ settings)Retrieve and migrate team settings in Microsoft Teams migrations.
    Microsoft GraphTeamsAppInstallation.ReadWriteForTeam(Manage installed Teams apps in teams)Retrieve and migrate team apps in Microsoft Teams migrations.
    Microsoft GraphTeamMember.ReadWrite.All(Add and remove members from teams)Migrate team members to the destination.
    Microsoft GraphTeam.Create(Create teams)Create Teams in Microsoft Teams migrations.
    Microsoft GraphChannelSettings.ReadWrite.All(Read and write the names, descriptions, and settings of channels)Retrieve and migrate channel settings in Microsoft Teams migrations.
    Microsoft GraphChannelMessage.Send(Send channel messages)Migrate channel messages in Microsoft Teams migrations.
    Microsoft GraphChannelMessage.Read.All(Read user channel messages)Retrieve channel messages in Microsoft Teams migrations.
    Microsoft GraphChannelMember.ReadWrite.All(Add and remove members from channels)Retrieve and migrate channel members in Microsoft Teams migrations.
    Microsoft GraphChannel.Create(Create channels)Create channels in Microsoft Teams migrations.
    Microsoft GraphSchedule.ReadWrite.All(Read and write all schedule items)Retrieve and migrate Teams Shifts app data in Microsoft Teams migrations.
    Microsoft GraphTeamsTab.Create(Create tabs in Microsoft Teams)Create tabs in destination chats in Microsoft Teams Chat migrations.
    Microsoft GraphTeamsTab.Read.All(Read tabs in Microsoft Teams)Retrieve tabs of destination chats in Microsoft Teams Chat migrations.
    Microsoft GraphTeamworkTag.ReadWrite(Read and write tag and tag member)Retrieve and migrate Teams work tags in Microsoft Teams migrations.
    Microsoft GraphTeamsTab.ReadWriteSelfForChat(Allow the Teams app to manage only its own tabs in chats)Update tabs in destination chats.
    Microsoft GraphFiles.ReadWrite.All(Have full access to all files user can access)Migrate files of team sites to the destination.
    Microsoft GraphSites.Read.All(Real content in all site collections)Retrieve all site collections.
    SharePointAllSites.FullControl(Have full control of all site collections)Retrieve and migrate content in SharePoint migrations.
    SharePointTermStore.ReadWrite.All(Read and write managed metadata)Retrieve and migrate Managed Metadata Service data.
    Office 365 Exchange OnlineEWS.AccessAsUser.All(Access mailboxes as the signed-in user via Exchange Web Services)Use Exchange Web Services with full access to user data via impersonation.
    Office 365 Exchange OnlineExchange.Manage(Manage Exchange configuration)Retrieve and migrate mailbox permissions, distribution groups, and other data related to Exchange PowerShell.
    Microsoft Information Protection Sync ServiceUnifiedPolicy.User.Read(Read all unified policies a user has access to)Retrieve sensitivity labels of files/mails/Groups.
    Azure Rights Management Servicesuser_impersonation(Create and access protected content for users)Migrate sensitivity labels of files/mails/Groups.