AvePoint Knowledge Center
Request article
Contact support
Request article
Contact support
English

    Home > Manage App Profiles > API Permissions Required by AvePoint Apps > Apps for Individual Services > Fly > Overview

    Export to PDF

    Fly

    When you create an app profile for Fly in AvePoint Online Services, the AvePoint Fly app will be automatically set up in your Microsoft Entra ID.

    *Note: When creating an app profile for the Fly service and consenting to the app with a Privileged Role Administrator account, the account may need additional permissions.

    - For Fly for Power Platform app, make sure the account has the **Power Platform Administrator** role. - For Fly app, refer to for details. - For Fly delegated app, refer to for details.

    The table below lists the permissions that should be accepted when you authorize the AvePoint Fly app.

    APIPermissionTypePurposeLast update
    SharePoint/Office 365 SharePoint OnlineSites.FullControl.All(Have full control of all site collections)ApplicationRetrieve and migrate settings and permissions of SharePoint Online site collections and team sites.
    SharePoint/Office 365 SharePoint OnlineTermStore.ReadWrite.All(Read and write managed metadata)ApplicationRetrieve and migrate Managed Metadata Service.
    SharePoint/Office 365 SharePoint OnlineUser.ReadWrite.All(Read and write user profiles)ApplicationRetrieve and migrate Microsoft 365 user profiles.
    Microsoft GraphDirectory.Read.All(Read directory data)ApplicationRetrieve and migrate Microsoft 365 users.
    Microsoft GraphUser.Read.All(Read all users' full profiles)ApplicationRetrieve the information of Microsoft 365 user profiles.
    Microsoft GraphGroup.ReadWrite.All(Read and write all groups)ApplicationRetrieve and migrate Microsoft 365 groups and group members.
    Microsoft GraphSites.ReadWrite.All(Read and write items in all site collections)ApplicationMigrate channel folders and files of team sites and private channels’ site collections.
    Microsoft GraphUser.Read(Sign in and read user profile)DelegatedRetrieve information of Microsoft 365 user profiles.
    Microsoft GraphChannelMember.ReadWrite.All(Add and remove members from all channels)ApplicationRetrieve and migrate private channel members.
    Microsoft GraphChannelMessage.Read.All(Read all channel messages)ApplicationRetrieve and migrate all channel messages.
    Microsoft GraphTeamMember.ReadWrite.All(Add and remove members from all teams)ApplicationRetrieve and migrate team members.
    Microsoft GraphTeamwork.Migrate.All(Create chat and channel messages with anyone’s identity and with any timestamp)ApplicationCreate teams and channels, and migrate channel messages with any message sender and timestamp.
    Microsoft GraphTeamworkTag.ReadWrite.All(Read and write tags in Teams)ApplicationRetrieve and migrate tags in Microsoft Teams migrations.
    Microsoft GraphTeamsAppInstallation.ReadWriteAndConsentForTeam.All(Manage installation and permission grants of Teams apps for all teams)ApplicationRead, install, upgrade, and uninstall Teams apps in Teams and manage Teams access permissions.Added in August 2025
    Microsoft GraphInformationProtectionPolicy.Read.All
    (Read all published labels and label policies for an organization)ApplicationOnly required if you want to manage sensitivity labels of files/emails/teams/groups/sites.
    Microsoft GraphOnlineMeetings.ReadWrite.All(Read and create online meetings)ApplicationMake sure the replaced meeting links in the destination are available to all attendees.
    Microsoft GraphChat.Create(Create chats)ApplicationCreate chats in Microsoft Teams Chat migrations.
    Microsoft GraphChat.ReadWrite.All(Read and write all chat messages)ApplicationRetrieve and migrate chat members/chat messages in Microsoft Teams Chat migrations.
    Microsoft GraphChannel.Create(Create channels)ApplicationCreate channels in Microsoft Teams migrations.
    Microsoft GraphChannelSettings.ReadWrite.All(Read and write the names, descriptions, and settings of all channels)ApplicationRetrieve and migrate channel settings in Microsoft Teams migrations.
    Microsoft GraphTeam.Create(Create teams)ApplicationCreate teams in Microsoft Teams migrations.
    Microsoft GraphTeamSettings.ReadWrite.All(Read and change all teams' settings)ApplicationRetrieve and migrate team settings in Microsoft Teams migrations.
    Microsoft GraphTeamsAppInstallation.ReadWriteForTeam.All(Manage Teams apps for all teams)ApplicationRetrieve and migrate team apps in Microsoft Teams migrations.
    Microsoft GraphTeamsTab.ReadWriteForTeam.All(Allow the Teams app to manage all tabs for all teams)ApplicationRetrieve and migrate team tabs in Microsoft Teams migrations.
    Microsoft GraphTeamsTab.Read.All(Read tabs in Microsoft Teams)ApplicationRetrieve tabs in destination chats in Microsoft Teams Chat migrations.Added in September 2022
    Microsoft GraphTeamsTab.Create(Create tabs in Microsoft Teams)ApplicationCreate tabs in destination chats in Microsoft Teams Chat migrations.Added in September 2022
    Microsoft GraphSchedule.ReadWrite.All(Read and write user schedule items)ApplicationRetrieve and migrate Teams Shifts app data in Microsoft Teams migrations.Added in September 2022
    Microsoft GraphReports.Read.All(Read all usage reports)ApplicationOnly required by tenant discovery.Added in September 2022
    Microsoft GraphTasks.ReadWrite.All(Read and write all users’ tasks and task lists)ApplicationRetrieve and migrate planners and data in planners.Added in June 2023
    Microsoft GraphReportSettings.Read.All(Read all admin report settings)ApplicationRetrieve the Reports setting of the Microsoft 365 admin center.Added in June 2023
    Microsoft GraphCalendars.ReadWrite(Read and write calendars in all mailboxes)ApplicationKeep the source Response statuses of Gmail event attendees to the destination Exchange Online.Added in June 2023
    Microsoft GraphTeamworkTag.ReadWrite(Read and write tags in Teams)DelegatedRetrieve and migrate tags in Microsoft Teams migrations.Added in December 2023
    Microsoft GraphTeamsAppInstallation.ReadForUser.All(Read installed Teams apps for all users)ApplicationRetrieve the list of apps installed in the personal scope of the specified user.Added in December 2023
    Office 365 Exchange Onlinefull_access_as_app(Use Exchange Web Services with full access to all mailboxes)ApplicationRetrieve and migrate items from all mailboxes.
    Office 365 Exchange OnlineExchange.ManageAsApp(Manage Exchange As Application)ApplicationUse Exchange PowerShell to migrate mailbox permissions and distribution lists.
    Azure Rights Management ServicesContent.DelegatedReader(Read protected content on behalf of a user)ApplicationOnly required if you want to manage sensitivity labels of files/emails/teams/sites.
    Azure Rights Management ServicesContent.DelegatedWriter(Create protected content on behalf of a user)ApplicationOnly required if you want to manage sensitivity labels of files/emails/teams/sites.
    Azure Rights Management ServicesContent.SuperUser(Read all protected content for this tenant)ApplicationOnly required if you want to manage sensitivity labels of files/emails/teams/sites.
    Azure Rights Management ServicesContent.Writer(Create protected content)ApplicationOnly required if you want to manage sensitivity labels of files/emails/teams/sites.
    Microsoft Information Protection Sync ServiceUnifiedPolicy.Tenant.Read(Read all unified policies of the tenant)ApplicationOnly required if you want to manage sensitivity labels of files/emails/teams/sites.