Home > Manage App Profiles > API Permissions Required by AvePoint Apps > Apps for Individual Services > tyGraph > tyGraph for SharePoint
Export to PDFWhen you create the tyGraph for SharePoint app profile in AvePoint Online Services, the AvePoint tyGraph for SharePoint app will be automatically set up in your Microsoft Entra ID.
The table below lists the permissions that should be accepted when you authorize the AvePoint tyGraph for SharePoint app.
| API | Permission | Type | Purpose |
|---|---|---|---|
| Microsoft Graph | Directory.Read.All(Read directory data) | Application | Retrieve information from your organization’s Active Directory. |
| Microsoft Graph | Files.Read.All(Read files in all site collections) | Application | Read files in all site collections of the SharePoint reporting. |
| Microsoft Graph | Group.Read.All(Read all groups) | Application | Inventory the groups for reporting purposes. |
| Microsoft Graph | Reports.Read.All(Read all usage reports) | Application | Read usage report data of all reporting. |
| Microsoft Graph | Sites.Read.All(Read items in all site collections) | Application | Read items in all site collections of the SharePoint reporting. |
| Microsoft Graph | User.Read.All(Read all users' full profiles) | Application | Read user properties. |
| Office 365 Management APIs | ActivityFeed.Read(Read activity data for your organization) | Application | An aggregation of actions and events for specified content types such as Microsoft Entra, SharePoint, OneDrive, Teams, or Viva Engage. |
| SharePoint/Office 365 SharePoint Online | Sites.Read.All(Read items in all site collections) | Application | Read items in all site collections of the SharePoint reporting. |
| SharePoint/Office 365 SharePoint Online | Sites.FullControl.All(Have full control of all site collections) | Application | Used in Sites that I own report to retrieve site owners and users with full control of sites.*Note: It can be removed in a custom app registration, but the Sites that I own report will not function. |