Create Azure AD App Only to authenticate our asp.net core console application

Question

I want to create an Azure AD App Only to authenticate our console application which run on schedule bases and update some SharePoint online sites' lists and libraries. now i am following those steps @ https://sharepointstew.wordpress.com/2021/07/07/app-only-authentication-in-sharepoint-online-using-latest-azure-sdk/

Where i created an app registration inside Azure AD

and then inside the API permissions >> I wanted grant permission for SharePoint. but i got those messages:-

so should i depend on Graph API ONLY and not create a separate permission for SharePoint ?

Second question, Also should i use delegated permission or app permission? and why?

Thanks

Answer 1

Hi @john john ,

According to my research and testing, if you use SharePoint REST operations via the Microsoft Graph REST API, you may need to use Microsoft Graph instead.

In addition, here is some information about Azure AD App Application Permissions and Delegated Permissions, please choose according to your needs:

Application Permissions: Your application needs to access the web API directly as itself (no user context). This type of permission requires administrator consent and is also not available for native client applications.
Delegation Permissions: Your application needs to access the web API as the signed-in user, but with access limited by the selected permission. This type of permission can be granted by a user unless the permission is configured as requiring administrator consent.

More information for reference: Azure AD App Application Permissions vs Delegated Permissions

Hope it can help you. Thanks for your understanding.

Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

---