Home > Manage App Profiles > API Permissions Required by AvePoint Apps > Apps for Individual Services > Fly > Fly for Entra ID Source and Destination
Export to PDFWhen you create a Fly for Entra ID source and destination app profile in AvePoint Online Services, the AvePoint Fly for Entra ID source and destination app will be automatically set up in your Microsoft Entra ID.
The table below lists the permissions that should be accepted when you authorize the AvePoint Fly for Entra ID source and destination app.
| API | Permission | Type | Purpose |
|---|---|---|---|
| Microsoft Graph | Domain.Read.All(Read domains) | Application | Retrieve tenant domain. |
| Microsoft Graph | RoleManagement.ReadWrite.Directory (Read and Write roles and Role assignments) | Application | Retrieve directory roles and migrate roles. |
| Microsoft Graph | Group.ReadWrite.All(Read and write all groups) | Application | Retrieve and migrate Microsoft 365 Groups and group members. |
| Microsoft Graph | User.ReadWrite.All(Read and write all users’ full profiles) | Application | Retrieve and migrate Microsoft 365 user. |
| Microsoft Graph | Organization.Read.All(Read subscribed SKUs) | Application | Retrieve information of license. |
| Microsoft Graph | User.EnableDisableAccount.All(Unblock user sign-in) | Application | Enable and disable users' accounts. |
| Microsoft Graph | User-Phone.ReadWrite.All(Update Business phone and Mobile phone) | Application | Update business phones and mobile phone properties for all users. |
| Microsoft Graph | User-Mail.ReadWrite.All(Update Other emails) | Application | Update other mails property for all users. |
| Microsoft Graph | MailboxSettings.Read(Read user’s mail setting) | Application | Retrieve the mailbox settings information for all users. |