How to replace SharePoint Online Client Extensibility Azure AD application which is provisioned automatically by SharePoint

Raniel Garcia 10 Reputation points
2025-04-19T13:46:18.3666667+00:00

In SharePoint Framework development, we can connect to APIs secured with Azure AD by adding/requesting permissions to an Azure AD application

webApiPermissionRequests": [ { 
   "resource": "Microsoft Graph",
   "scope": "Calendars.Read" 
} ]

These permissions will be added once approved in the service principal SharePoint Online Client Extensibility, which is provisioned by Microsoft automatically.

That service principal is used by all SharePoint sites in a single tenant, meaning all permissions added from different webpart from different team will be added as permissions to that service principal.

How can I create my own App Registration that I can use to replace the SharePoint Online Client Extensibility to have a full-control who can use the permissions that I am going to add to that new app registration?

Microsoft 365 and Office | SharePoint | Development
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.