Access requirements to call Endpoint: https://XXX.sharepoint.com/sites/PermissionTest/_api/web/roleassignments?$expand=Member/users,RoleDefinitionBindings,Member

Question

Hi team

I need to call an endpoint using PowerQuery to extract current permissions. I have service user for that purpose but I am unable to set up the permissions so that the endpoint can be queried.

I am able to get all sharepoint sites, however when trying to get to the Permissions, the authorization is refused.

Thanks for the help!

Answer 1

1.Azure Active Directory Permissions:

If you're using an Azure AD application to authenticate, go to Microsoft Entra admin center -> Applications -> App registrations -> Select your App -> API permissions -> Add following permissions.

(1)Sites.FullControl.All: Grants full control over all site collections.

(2)User.Read.All: Allows the application to read all users' full profiles.

After adding these permissions, make sure to grant admin consent to apply them.

2.SharePoint permissions:

If you're using SharePoint created application to authenticate, use appregnew.aspx and appinv.aspx to create the app and grant it full control permission.

Then get a bearer token using a client credential in Postman.

Reference:

https://www.billyperalta.com/Accessing%20SharePoint%20REST%20API%20using%20Postman/

Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.