SharePointOnline.CSOM AAD App Registration - Delegated Permissions

Question

Hi all, I'm trying to use Microsoft.SharePointOnline.CSOM for .NET Standard. In reading the documentation here:
https://learn.microsoft.com/en-us/sharepoint/dev/sp-add-ins/using-csom-for-dotnet-standard#using-modern-authentication-with-csom-for-net-standard
I see that I need an app registration in AAD with delegated permissions. In the documentation, uses allsites.Manage as the permission to assign. There is no way that the platform group is going to assign my little app permissions to manage all sites within the organization. Is there another way? Certainly there must be a least-rights approach. Anything you can tell me to help me get the bearer token would be appreciated.

Thanks,

E

Answer 1

Hi @Evan.Bonnett ,

For delegated permissions, the effective permissions of your app are the intersection of the delegated permissions the app has been granted and the privileges of the currently signed-in user. Your app can never have more privileges than the signed-in user.

Besides, AllSites.Manage permission doesn't require admin consent. So you could register an app as a normal user and give it allsite.manage permission. As the below:

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

@Evan.Bonnett ,

Is there anything update? Have you solved this issue?