Forum Discussion
Azure AD App Registration - Permision request to Read and Write to “All” Site Collections too broad
When setting up an Azure App Registration for the Microsoft Graph or the SharePoint Online APIs, the only option is to grant read and write to "ALL" site collections either as delegated or app permis...
Just checking my post here... still no answer?
Aaron Cutlip just curious how you handled this.
Did you use Graph api / SharePoint Online api? Or did you end up using Add-in model?
Graph API is the new way to go but like you said it raises a lot of red flags when you have to grant Read Write to all site collections even for internal apps built by in house developers.
It has been more than an year since you posted and I don't see any responses which kinda makes me think that granular permissions is not coming anytime soon.