Clarification on SharePoint Macro Consent Flow and Permissions

Hi, “View your basic profile” and “Maintain access to data you have given it access to” are common identity/offline access permissions, but the customer is right to ask for the full permission story. I would document the exact Graph and SharePoint scopes requested in the app registration, what API calls use them, and whether any tenant-wide permission is involved. If the macro can work with Sites.Selected, that is usually easier to approve in a secure environment than broad site permissions.