Permission

Service

Why we need it

Have full control of all site collections

Graph API

During NITRO Installation we automatically add key apps to the App Catalog (e.g. Workflow app, Email Sync app, etc). Allows NITRO apps in the App Catalog to be updated automatically on an ongoing basis. Allows for activating and updating NITRO on any site. This requires full control of all site collections for these functions to work properly.

SharePoint API

Read all users’ full profiles

Graph API

Get user information for use in notifications, workflows, and auto-filling forms

Sign in and read user profile

Graph API

Get user information for use in notifications, workflows, and auto-filling forms

Read Managed Metadata

SharePoint API

Used for processing workflows and other functions involving managed metadata columns

Read user profiles

SharePoint API

Get user information for use in notifications, workflows, and auto-filling forms