rencore.com (opens in a new tab) Start a trial (opens in a new tab)

OneDrive permissions

Last updated Consent

AI summary

See which OneDrive permissions Rencore Governance requests through its authenticator and which inventory objects depend on each one. Each includes a description and a link to Microsoft's documentation.

The permissions Rencore Governance requests through the OneDrive authenticator, and the inventory objects that rely on each one. Each permission links to its Microsoft documentation.

See Microsoft permissions for every authenticator, and Required permissions for how consent works.

Permissions

Permission Description Type Used by
Read all users' full profiles User.Read.All Allows the app to read the full set of profile properties, reports, and managers of other users in your organization, on behalf of the signed-in user. Application Deleted user , User , TeamsMemberEntity , TeamsOwnerEntity
Read file data Allows the app to read data in your organization's file. Application OneDrive
Read items in all site collections Sites.Read.All Allows the app to read documents and list items in all site collections without a signed in user. Application GroupSiteCollectionEntity , SharePoint agent , Deleted site collection , List/library , Locked site collection , Site collection , SharePoint special group , Site , TeamsSharePointSiteEntity

Frequently asked questions

Which permissions does the OneDrive authenticator request?

3 permissions: Read all users' full profiles, Read file data and Read items in all site collections.

What are the Microsoft names of the OneDrive permissions?

User.Read.All and Sites.Read.All.

Are the OneDrive permissions application or delegated permissions?

All 3 permissions are application permissions.

Which inventories need the OneDrive permissions?

The inventories of Microsoft 365, OneDrive and SharePoint.