|
1 | 1 | ---
|
2 | 2 | title: How to provide add-in app only tenant administrative permissions in SharePoint Online
|
3 |
| -ms.date: 06/05/2020 |
| 3 | +ms.date: 04/22/2020 |
4 | 4 | localization_priority: Priority
|
5 | 5 | ---
|
| 6 | +How to provide add-in app only tenant administrative permissions in SharePoint Online |
| 7 | +================================================ |
6 | 8 |
|
7 |
| -# How to provide add-in app only tenant administrative permissions in SharePoint Online |
8 |
| - |
9 |
| -When you are developing SharePoint add-ins and want to register them using the ACS model (**appregnew.aspx** and **appinv.aspx**), you will need to follow a special process, when an add-in is requesting tenant admin permissions and in app-only mode. |
| 9 | +When you are developing SharePoint add-ins and want to register them using the ACS model (appregnew.aspx and appinv.aspx), you will need to follow a special process, when an add-in is requesting tenant admin permissions and in app-only mode. |
10 | 10 |
|
11 | 11 | > [!IMPORTANT]
|
12 |
| -> Azure Access Control (ACS), a service of Azure Active Directory (Azure AD), was retired on November 7, 2018. This retirement does not impact the SharePoint Add-in model, which uses the `https://accounts.accesscontrol.windows.net` hostname (which is not impacted by this retirement). For more information, see [Impact of Azure Access Control retirement for SharePoint Add-ins](https://developer.microsoft.com/office/blogs/impact-of-azure-access-control-deprecation-for-sharepoint-add-ins). |
| 12 | +> Azure Access Control (ACS), a service of Azure Active Directory (Azure AD), will be retired on November 7, 2018. This retirement does not impact the SharePoint Add-in model, which uses the `https://accounts.accesscontrol.windows.net` hostname (which is not impacted by this retirement). For more information, see [Impact of Azure Access Control retirement for SharePoint Add-ins](https://developer.microsoft.com/office/blogs/impact-of-azure-access-control-deprecation-for-sharepoint-add-ins). |
13 | 13 |
|
14 | 14 | Steps to provide tenant admin permission for app only add-in:
|
15 | 15 |
|
16 |
| -- Register app id for the add-in under normal site collection in the tenant. |
17 |
| - - `https://[tenant].sharepoint.com/_layouts/15/appregnew.aspx` |
18 |
| -- Provide necessary details for the add-in registration, register the ID and secret for your add-in. |
19 |
| -- Upload the add-in package to tenant app catalog. |
20 |
| - |
21 |
| - > [!IMPORTANT] |
22 |
| - > This only applies to tenant-scoped app catalogs. It won't workfor site collection-scoped catalogs because this process will request app-only administrative tenant permissions. |
23 |
| -
|
24 |
| -- Navigate to the **appinv.aspx** page in your tenant admin site. |
25 |
| - - `https://[tenant]-admin.sharepoint.com/_layouts/15/appinv.aspx` |
26 |
| -- Find for the app ID registered in previous steps in **appinv.aspx** page. |
27 |
| -- Provide needed permissions for your add-in registration. |
28 |
| -- Trust the updated add-in registration. |
| 16 | +- Register app id for the add-in under normal site collection in the tenant where add-in will be deployed. |
| 17 | + - URL: *https://[tenant].sharepoint.com/_layouts/15/appregnew.aspx* |
| 18 | +- Provide necessary details for the add-in registration and register ID and secret for your add-in |
| 19 | +- Move to appinv.aspx page under your tenant admin site |
| 20 | + - URL: *https://[tenant]-admin.sharepoint.com/_layouts/15/appinv.aspx* |
| 21 | +- Perform a lookup for the app id registered in previous steps in appinv.aspx page |
| 22 | +- Provide needed permissions for your add-in registration |
| 23 | +- Perform trust for the updated add-in registration |
29 | 24 |
|
30 | 25 | Notice that this operation has to be completed under the tenant administration site and account used for these operations will need to have tenant administrative permissions. If you are providing lower level permissions for your add-in, you can complete those under normal site collection URLs with lower permissions.
|
31 | 26 |
|
32 | 27 |
|
33 | 28 | ## See also
|
| 29 | +<a name="bk_addresources"> </a> |
34 | 30 |
|
35 | 31 | - [Register SharePoint Add-ins 2013](https://msdn.microsoft.com/library/office/jj687469.aspx)
|
| 32 | + |
36 | 33 | - [Add-in permissions in SharePoint 2013](https://msdn.microsoft.com/library/office/fp142383.aspx)
|
37 | 34 |
|
0 commit comments