Home > Manage App Profiles > API Permissions Required by AvePoint Apps > Apps for Individual Services > Fly > Fly for Entra ID Source
Export to PDFWhen you create a Fly for Entra ID source app profile in AvePoint Online Services, the AvePoint Fly for Entra ID source app will be automatically set up in your Microsoft Entra ID.
The table below lists the permissions that should be accepted when you authorize the AvePoint Fly for Entra ID source app.
| API | Permission | Type | Purpose |
|---|---|---|---|
| Microsoft Graph | Domain.Read.All(Read domains) | Application | Retrieve tenant domain. |
| Microsoft Graph | RoleManagement.Read.Directory(Read roles and Role assignments) | Application | Retrieve directory roles. |
| Microsoft Graph | Group.Read.All (Read all groups) | Application | Retrieve Microsoft 365 Groups and Group members. |
| Microsoft Graph | User.Read.All (Read all users’ full profiles) | Application | Retrieve information of Microsoft 365 user profiles. |
| Microsoft Graph | Organization.Read.All(Read subscribed SKUs) | Application | Retrieve information of license. |
| Microsoft Graph | MailboxSettings.Read(Read user’s mail setting) | Application | Retrieve the mailbox settings information for all users. |