API permissions

Question

Hi All

i am new to Azure Enterprise Application i have the below SharePoint site.

https://contoso.sharepoint.com/sites/abc

I have created a service principal 6 months back using the below url
https://contoso.sharepoint.com/sites/abc/_layouts/15/appregnew.aspx

i have given some permissions on the service principal using the below url(App's Permission Request XML). i want to know what permissions i have given on this service principal 6 months as i dont remember. is there any way to fetch this information.

https://contoso.sharepoint.com/sites/abc/_layouts/15/appinv.aspx

Answer 1

Hi @Glenn Maxwell ,

According to my research and testing, unfortunately, there is currently no way to see the app's permissions.

As a workaround, if you do not remember what permissions you have given, you can regranted the permission through the URL https://contoso.sharepoint.com/sites/abc/_layouts/15/appinv.aspx. It will override the permission you have given before.

You can follow these steps:

1.First, get APP-Id through the URL https://contoso.sharepoint.com/sites/abc/_layouts/15/AppPrincipals.aspx (The black covered part in the screenshot below)

2.Second, regranted the permission through the URL https://contoso.sharepoint.com/sites/abc/_layouts/15/appinv.aspx. ,input the App-id and click Lookup, then input Permission Request XML, for example:

<AppPermissionRequests AllowAppOnlyPolicy="true">  
  <AppPermissionRequest Scope="http://sharepoint/content/tenant" Right="FullControl" />  
</AppPermissionRequests>  

Hope it can help you. Thanks for your understanding.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

---

Answer 2

First off, when you use appregnew.aspx to register an app, you are using the SharePoint Add-in security model which registers apps with Azure Access Control Service (ACS) not with Azure Active Directory (AD). You register apps with Azure AD through the Azure portal.

Now, to your question. As far as I know there is no way to see the app's permission request XML for existing ACS apps. The best you can get is to navigate the Site Contents for a site where the SharePoint-hosted or Provider-hosted add-in (app) is deployed and then select Manage Permissions from the app tile's context menu. This will give you a description of the permissions that have been granted to the ACS app.

Answer 3

i looked into site content but i am unable to see the permissions. i have checked using the below urls i am not sure what wrong i am doing

https://contoso.sharepoint.com/sites/abc/_layouts/15/AppPrincipals.aspx

https://contoso.sharepoint.com/sites/abc/_layouts/15/appStore.aspx/myApps?entry=NewAppInSiteContents&sorting=1

i clicked classic experience.