Setting up API Permissions for the App Registration
01/07/2025
After you have created an app registration, you need to grant it permissions to call the Microsoft Graph and SharePoint APIs. You must also grant the app registration an admin consent to access your organization's data.
Use the following steps to set up API permissions for App Registration.
Select API permissions from the menu on the left.
Select Add a permission.
Select Microsoft Graph.
Select Application permissions as the type of permissions that the app registration needs to call the Microsoft Graph APIs.
Specify the Microsoft Graph permissions.
If this is an app registration for just the Tagging module, select Sites.Selected to grant the app registration access to specific sites. You can specify the individual sites in the Administration application.
If this is an app registration for just the Term Store Synchronization module, select TermStore.ReadWrite.All.
If this is an app registration for both the Term Store Synchronization and the Tagging modules, select Sites.Selected and TermStore.ReadWrite.All.
Confirm with Add permissions.
Select SharePoint.
Select Application permissions as the type of permissions that the app registration needs to call the SharePoint APIs.
Specify the SharePoint permissions.
If this is an app registration for just the Tagging module, select Sites.Selected to grant the app registration access to specific sites. You can specify the individual sites in the Administration application.
If this is an app registration for just the Term Store Synchronization module, select TermStore.ReadWrite.All, and TermStore.Read.All.If you want to make use of the Term Store-based tagging for the Managed Metadata columns, additionally select Sites.Selected. You can specify the individual sites in the Administration application.
If this is an app registration for both the Term Store Synchronization and the Tagging modules, select Sites.Selected, TermStore.ReadWrite.All and TermStore.Read.All.
Confirm with Add permissions.
Select Grant admin consent for your organization.
Confirm with Yes.