These Microsoft 365 roles and permissions, or minimum scope, are required for ManageEngine SharePoint Manager Plus.
Table 1: Service account- Permissions required
| Modules | Permissions Needed |
|---|---|
| Reporting, management, and migration | SharePoint Administrator from Microsoft 365 Admin Center. |
Table 2: Azure application- Permissions required
| Modules | API | Permissions Needed |
|---|---|---|
| Reporting, management, and migration | SharePoint | Sites.FullControl.All |
| Auditing | Office 365 Management APIs | ActivityFeed.Read |
| Monitoring | Microsoft Graph | ServiceHealth.Read.All |
| Mail server | Microsoft Graph | Mail.Send |
These roles and permissions, or minimum scope, should be assigned to the service account used to configure the SharePoint servers in SharePoint Manager Plus.
Note: The site collection admin permission is required for the respective site collections to perform any operations.
| Modules | Permissions Needed |
|---|---|
| Reporting, management, and migration |
|
| Auditing | Site collection audit settings must be enabled for the respective site collections. |
| IIS log reports | User should be a member of the default administrator group of the IIS server. |
Copyright © 2025, ZOHO Corp. All Rights Reserved.