Applying Permissions to the Application

Once you have registered and configured an authentication method for your Azure application, API permissions must be assigned to the application to allow access to specific data types within Microsoft Office 365.

To apply the required API permissions to the application:

1. Access the Overview page of your newly created application.

   Tip

   To access this page from the Azure portal Home page, select Azure Active Directory from the home page then App registrations from the left navigation panel. Finally, click on the name of the new application to access its Overview page.

2. Select API permissions from the left navigation panel and then click Add a permission.

3. From the list of Commonly used Microsoft APIs, select Microsoft Graph.

   

4. Click Delegated permissions and then select the following permission:

5. Return to the top of the page and click Application permissions to change the permission type, then select the following permissions:

6. After all the specified API permissions have been selected, click Add permissions from the bottom of the view to apply the selections.

7. The newly added API permissions are initially displayed with a Not Granted status. Click Grant admin consent for <AD Tenant name> to update the status.

   Note

   By granting admin consent, the Service Principal account for the selected AD tenant is granted access to the selected API permissions. The defined application permissions provide access to specific data contained within Microsoft Teams, Exchange, and SharePoint.

8. Proceed to the next topic to request access to the protected APIs.