API Permissions Quick Reference

Use this reference to identify the correct Azure API permissions for your chosen SharePoint connector configuration. Cross-reference with your source configuration settings in Control Hub.

Configuration Scenario	Use Graph For Permissions	Use Graph For Site Discovery	Can Get Permissions In Bulk?	Is Permissionless Crawl?	SharePoint Security Sync Required?	Azure API Permissions Required	Remarks
Full Control All Access	false	false	true	false	false	SharePoint API: Sites.FullControl.All	Fast: Quicker response times and can get permissions in bulk
Full Control All Access - Permissionless	false	false	N/A	true	false	SharePoint API: Sites.FullControl.All	Faster: Quicker response times and no permission retrieval needed
Selected Sites - Full Control Access	false	false	true	false	false	SharePoint API: Sites.Selected	Fast: Quicker response times and can get permissions in bulk Sites.Selected: FullControl must be granted for each individual site
Selected Sites - Full Control Access - Permissionless	false	false	N/A	true	false	SharePoint API: Sites.Selected	Faster: Quicker response times and no permission retrieval needed Sites.Selected: FullControl must be granted for each individual site
Read All Access	true	true	false	false	true	SharePoint API: Sites.Read.All Graph API: Sites.Read.All	Slow: Slower response times and requires individual API calls for permissions
Read All Access - Permissionless	false	true	N/A	true	false	SharePoint API: Sites.Read.All Graph API: Sites.Read.All	Fast: No permission retrieval needed, uses Graph for site discovery only
Selected Sites - Read Access	true	true	false	false	true	SharePoint API: Sites.Selected Graph API: Sites.Selected	Slow: Slower response times and requires individual API calls for permissions Sites.Selected: Read access must be granted for each individual site
Selected Sites - Read Access - Permissionless	false	true	N/A	true	false	SharePoint API: Sites.Selected Graph API: Sites.Selected	Fast: No permission retrieval needed, uses Graph for site discovery only Sites.Selected: Read access must be granted for each individual site