Home > Manage Apps > Manage App Profiles for Microsoft Tenants > API Permissions Required by Default AvePoint Apps for Microsoft Tenants > Opus
Export to PDFWhen you create an app profile for Opus in AvePoint Online Services, the AvePoint Opus app will be automatically set up in your Microsoft Entra ID.
The table below lists the permissions that should be accepted when you authorize the AvePoint Opus app.
| API | Permission | Type | Purpose | Is newly required? |
|---|---|---|---|---|
| Microsoft Graph | Group.ReadWrite.All(Read and write all groups) | Application | Retrieve and update group information. | No |
| Microsoft Graph | Directory.Read.All(Read directory data) | Application | Retrieve your organization’s Microsoft Entra data. | No |
| Microsoft Graph | User.Read.All(Read all users’ full profiles) | Application | Retrieve user information. | No |
| Microsoft Graph | Reports.Read.All(Read all usage reports) | Application | Retrieve file size of your Microsoft 365 tenant.This permission will be required if you want to use the Discovery and Analysis functionality. | No |
| Microsoft Graph | TeamsSettings.ReadWrite.All(Read and change all teams' settings) | Application | Read and change all teams' settings. | No |
| Microsoft Graph | TeamsTab.ReadWrite.All(Read and write tabs in Microsoft Teams) | Application | Read and write tabs in Microsoft Teams. | No |
| Microsoft Graph | Sites.ReadWrite.All(Read and write items in all site collections) | Application | Read and write items in all site collections. | No |
| Microsoft Graph | Team.Create(Create teams) | Application | Create teams. | No |
| Microsoft Graph | TeamMember.ReadWrite.All(Add and remove members from all teams) | Application | Add and remove members from all teams. | No |
| Microsoft Graph | Chat.Read.All(Read all chat messages) | Application | Read all chat messages. | No |
| Microsoft Graph | ChannelMessage.Read.All(Read all channel messages) | Application | Read all channel messages. | No |
| Microsoft Graph | TeamsAppInstallation.ReadWriteForTeam.All(Manage Teams apps for all teams) | Application | Manage Teams apps for all teams. | No |
| Microsoft Graph | ChannelMember.ReadWrite.All(Add and remove members from all channels) | Application | Add and remove members from all channels. | No |
| Microsoft Graph | Tasks.ReadWrite.All(Read and write all users’ tasks and task lists) | Application | Read and write all users' tasks and task lists. | No |
| Microsoft Graph | ChannelSettings.ReadWrite.All(Read and write the names, descriptions, and settings of all channels) | Application | Retrieve channel information. | No |
| Microsoft Graph | Channel.Create(Create channels) | Application | Create channels. | No |
| Microsoft Graph | Sites.FullControl.All(Have full control of all site collections) | Application | Have full control of all site collections. | No |
| Microsoft Graph | Group.ReadWrite.All(Read and write all groups) | Delegated | Read and write all groups. | No |
| Microsoft Graph | ChannelMessage.Send(Send channel messages) | Delegated | Send channel messages. | No |
| Microsoft Graph | TeamMember.ReadWrite.All(Add and remove members from all teams) | Delegated | Add and remove members from teams. | No |
| Microsoft Graph | ChannelMember.ReadWrite.All(Add and remove members from all channels) | Delegated | Add and remove members from channels. | No |
| Microsoft Graph | User.Read.All(Read all users’ full profiles) | Delegated | Read all users' full profiles. | No |
| Microsoft Graph | Directory.Read.All(Read directory data) | Delegated | Read directory data. | No |
| Office 365 Exchange Online | full_access_as_app(Use Exchange Web Services with full access to all mailboxes) | Application | Retrieve information of Exchange Online mailboxes and Microsoft 365 Group mailboxes. | No |
| Office 365 Exchange Online | Exchange.ManageAsApp(Manage Exchange as application) | Application | Retrieve mailbox data. | No |
| SharePoint/Office 365 SharePoint Online | User.Read.All(Read user profiles) | Delegate | Retrieve user information. | No |
| SharePoint/Office 365 SharePoint Online | Sites.FullControl.All(Have full control of all site collections) | Application | Retrieve and manage SharePoint objects. | No |
| SharePoint/Office 365 SharePoint Online | User.Read.All(Read user profiles) | Application | Retrieve user information. | No |
| SharePoint/Office 365 SharePoint Online | TermStore.ReadWrite.All(Read and write managed metadata) | Application | Retrieve, and synchronize terms to term store. | No |