Get Started
To get started with Cloud Insights, ensure your tenant has configured any of the following app profiles in AvePoint Online Services > Management > App management:
- **Microsoft 365 (All permissions)** – Once you create a **Microsoft 365 (All permissions)** app profile, the **AvePoint Online Services Administration** **forMicrosoft365** app will be generated accordingly in your Microsoft Entra ID. To see the API permissions you need to accept when you authorize the app, refer to the section in the AvePoint Online Services user guide.
- **Reporting for Microsoft 365** – Once you create a **Reporting for** **Microsoft 365** app profile in AvePoint Online Services, the **AvePoint** **Reporting for** **Microsoft365** app is automatically created in your Microsoft Entra ID. To see the API permissions you need to accept when you authorize the app, refer to the section in the AvePoint Online Services user guide.
- **Microsoft 365 (SharePoint Online permissions)** – The **Microsoft 365 (SharePoint Online** **permissions)** app profiles are upgraded from the AvePoint Online Services classic UI, and they cannot be created in the new interfaces of AvePoint Online Services. The **Microsoft 365 (SharePoint Online** **permissions)** app profile is for the **AvePoint Online Services Administration** **forSharePoint** app in your Microsoft Entra ID. To see the API permissions you need to accept when you authorize the app, refer to the section in the AvePoint Online Services user guide.
- **Custom Azure app** – If you want to manually create an app in your Microsoft Entra ID, refer to the permissions listed in the table below to add API permissions required by AvePoint Cloud Insights to the custom app.
| Cloud Insights Feature | API Name | Permission | Type | Purpose |
|---|
| View Reports | SharePoint | Sites.FullControl.All(Have full control of all site collections) | Application | Retrieve information of site collections that are scanned by Auto Discovery. |
| View Reports | Office 365 Management APIs | ActivityFeed.Read(Read activity data for your organization) | Application | Retrieve activity data in your organization to generate reports in AvePoint Cloud Insights. |
| View Reports | Microsoft Graph | Group.Read.All(Read all groups) | Application | Scan Microsoft 365 Groups and Microsoft Teams via Auto Discovery. |
| View Reports | Microsoft Graph | User.Read.All(Read user profiles) | Application | Retrieve information of Microsoft 365 user profiles related to OneDrive for Business that are scanned by Auto Discovery. |
> ***Note**: If you use a Microsoft 365 U.S. Government environment and want to use a custom Azure app for SharePoint, you must add SharePoint API permissions to the custom app through **Manifest**. Microsoft Azure Government does not allow you to select SharePoint API permissions on the Azure Governance Portal interface.
The table below lists the required information for adding SharePoint API permissions to the custom app.
| API | Permission | resourceAppId | id | type |
|---|
| SharePoint | Sites.FullControl.All(Have full control of all site collections) | 00000003-0000-0ff1-ce00-000000000000 | 678536fe-1083-478a-9c59-b99265e6b0d3 | Role |
For more details on configuring app profiles, refer to the section in the AvePoint Online Services user guide.
