Forum Discussion
Why would a third party tool ask for permission to be able to add document libraries inside the site
Agreed, those permissions do seem rather overarching and far-reaching but I'd guess it's to do with the way this app integrates into SPO and it's necessitated with how it ties together with the added functionality. Those permissions may only be used to initialize the add-in and not used in normal operation, you'd have to get the vendor to explain for sure though!
Cian Allner wrote:Agreed, those permissions do seem rather overarching and far-reaching but I'd guess it's to do with the way this app integrates into SPO and it's necessitated with how it ties together with the added functionality. Those permissions may only be used to initialize the add-in and not used in normal operation, you'd have to get the vendor to explain for sure though!
ok thanks for the reply. so you mean end users who can use the Docusign app, will NOT be able to benefit from these "Extra" permissions to do actions they are not allow to do, such as add/delete document libraries? is this correct? for example a user with contribute permission, can use the DocuSign app, but at the same time the user can not use the app to add/delete document library ??
I think you are on the right track, doing your due diligence and asking the vendor to explain how permissions are used but almost certainly users will not get extra permissions like those listed in the screenshot as you have asked. That would certainly be a big flaw otherwise! I am relatively certain those permissions are just used internally, behind the scenes to add the integration in the first place but getting confirmation is a good idea.