admin previleges for integration

Question

admin previleges for integration

Seenivasan, Rajaprabhu (S.) 0

i am trying to integrate Sharepoint with Azure Entra ID using Power automate workflow. Need some admin permissions for this integration to happen.

Seenivasan, Rajaprabhu (S.) 0 Reputation points

2026-02-20T09:34:17.01+00:00

Group.ReadWrite.all - i need this permission
VEMULA SRISAI 9,820 Reputation points Microsoft External Staff Moderator

2026-02-20T20:45:11.7233333+00:00
Hello Seenivasan, Rajaprabhu (S.),

To integrate SharePoint with Microsoft Entra ID using Power Automate, Global Administrator access is not always required, but admin consent is mandatory for certain permissions.

Required permissions / roles:

Microsoft Entra ID

Application Administrator or Cloud Application Administrator

Needed to grant admin consent for SharePoint / Microsoft Graph permissions used by the flow

SharePoint
- **SharePoint Administrator** - Required if the flow accesses site collections, lists, or uses elevated SharePoint APIs **Power Platform** - **Power Platform Administrator** or **Environment Admin** - Required to create and manage Power Automate connections and flows

When admin consent is required:

Admin consent is required if the flow or connector uses permissions such as:

Sites.Read.All

Sites.ReadWrite.All

Sites.FullControl.All

Any application‑level Microsoft Graph permissions.
VEMULA SRISAI 9,820 Reputation points Microsoft External Staff Moderator

2026-02-22T11:38:50.3933333+00:00

Seenivasan, Rajaprabhu (S.) I’m following up on my previous comment as I haven’t received a response. Please let me know if you need any additional information or assistance from my side.

1 answer

Your answer

Seenivasan, Rajaprabhu (S.) 0 Reputation points

2026-02-20T09:34:17.01+00:00

Group.ReadWrite.all - i need this permission
VEMULA SRISAI 9,820 Reputation points Microsoft External Staff Moderator

2026-02-20T20:45:11.7233333+00:00

Hello Seenivasan, Rajaprabhu (S.),

To integrate SharePoint with Microsoft Entra ID using Power Automate, Global Administrator access is not always required, but admin consent is mandatory for certain permissions.

Required permissions / roles:

Microsoft Entra ID

Application Administrator or Cloud Application Administrator

Needed to grant admin consent for SharePoint / Microsoft Graph permissions used by the flow

SharePoint
- **SharePoint Administrator** - Required if the flow accesses site collections, lists, or uses elevated SharePoint APIs **Power Platform** - **Power Platform Administrator** or **Environment Admin** - Required to create and manage Power Automate connections and flows

When admin consent is required:

Admin consent is required if the flow or connector uses permissions such as:

Sites.Read.All

Sites.ReadWrite.All

Sites.FullControl.All

Any application‑level Microsoft Graph permissions.
VEMULA SRISAI 9,820 Reputation points Microsoft External Staff Moderator

2026-02-22T11:38:50.3933333+00:00

Seenivasan, Rajaprabhu (S.) I’m following up on my previous comment as I haven’t received a response. Please let me know if you need any additional information or assistance from my side.

Answer 1

To integrate SharePoint with Azure Entra ID using Power Automate, you will need specific admin permissions. Here are the required permissions:

Microsoft 365 Global Admin Membership: This is necessary for administrative-level access to the Microsoft 365 subscription and to run the necessary wizards and PowerShell cmdlets.
Power Apps Run SharePoint Integration Wizard Privilege: This privilege allows you to run the Enable Server-based Authentication wizard, which is essential for the integration. By default, the System Administrator security role has this privilege.
SharePoint Farm Administrators Group Membership: This is required to run most PowerShell commands on the SharePoint server for integration purposes.

Make sure you have these permissions set up to successfully carry out the integration.

Share via

admin previleges for integration

Required permissions / roles:

When admin consent is required:

1 answer

Your answer