Azure AD Application Permission for SharePoint Term store

Maru Madrelejos 1 Reputation point
2021-07-07T11:31:15.383+00:00

Hi everyone,

Sharepoint Application Permission only provides TermStore.ReadWrite.All which only allows the app to write enterprise managed metadata and to read basic site info without a signed in user.

Since edit/update isnt an option in here is there any way where I can edit a term in term store using an application permission?

(A delegated permission isnt an option for me since Im creating an azure webjob so there should be no user login required)

MS Graph API has an Application Permission that can edit terms, can anyone give me a documentation/sample .NET code on how to consume it?

Thank you all !

SharePoint
SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
10,677 questions
SharePoint Development
SharePoint Development
SharePoint: A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.Development: The process of researching, productizing, and refining new or existing technologies.
2,969 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. sadomovalex 3,631 Reputation points
    2021-07-07T16:17:39.753+00:00

    TermStore.ReadWrite.All app permission allows also to edit existing terms. There are 2 Sharepoint app permissions available for working with term stores:
    112639-2021-07-07-19-15-53.png

    With TermStore.Read.All you may only read managed metadata, with TermStore.ReadWrite.All you may both read and write (including edit/update).

    1 person found this answer helpful.
    0 comments No comments

  2. MichaelHan-MSFT 18,031 Reputation points
    2021-07-08T03:07:25.67+00:00

    Hi @Maru Madrelejos

    Sharepoint Application Permission TermStore.ReadWrite.All allows th app to edit/update operations, you'll need to explicitly add app@Srini M identity as a Term Store Administrator in the Taxonomy Term Store administrative user interface. This grants the app-only identity needed permissions for write operations.

    112774-image.png

    I have answered the similar question here: https://learn.microsoft.com/en-us/answers/questions/456125/issue-deleting-terms-from-term-store.html


    If an Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.