Skip to content

Commit 1b7a33f

Browse files
authored
Update use-aadhttpclient.md
Due to a case I worked on: 18146507, the Azure AD colleague and I identified that the information provided is not accurate.
1 parent d8ea491 commit 1b7a33f

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

docs/spfx/use-aadhttpclient.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -170,7 +170,8 @@ If your SharePoint Framework solution requires permissions to specific resources
170170
4. When this solution is deployed to the SharePoint app catalog, it prompts the administrator to verify the requested permissions and either grant or deny them.
171171

172172
> [!NOTE]
173-
> No matter if the administrator denies or approves the requested permissions, the solution can be deployed and used on sites. When building solutions that require additional permissions, you should never assume that the requested permissions have been granted.
173+
> If you have the "App Registrations" option set to No under Azure Active Directory - User Settings AND the "Users can consent apps accessing company data on their behalf" option set to No under Azure Active Directory - Enterprise Applications - User Settings, you will not be able to upload/deploy the solution to the App Catalog. For this to work, you will need to have the either Role "Global Admin" or "Application Developer" assigned to the user .
174+
When building solutions that require additional permissions, you should never assume that the requested permissions have been granted.
174175

175176
## Manage permission requests
176177

@@ -377,7 +378,8 @@ Revoking previously granted permissions doesn't invalidate access tokens issued
377378

378379
### Permission request doesn't affect solution deployment
379380

380-
No matter if the administrator denies or approves permissions requested by the solution, the solution can be deployed and used on sites. When building solutions that require additional permissions, you should never assume that the requested permissions have been granted.
381+
If you have the "App Registrations" option set to No under Azure Active Directory - User Settings AND the "Users can consent apps accessing company data on their behalf" option set to No under Azure Active Directory - Enterprise Applications - User Settings, you will not be able to upload/deploy the solution to the App Catalog. For this to work, you will need to have the either Role "Global Admin" or "Application Developer" assigned to the user .
382+
When building solutions that require additional permissions, you should never assume that the requested permissions have been granted.
381383

382384
### Control the SharePoint Online Client service principal
383385

0 commit comments

Comments
 (0)