Minimum permissions required for API call for getting subsites and getting role assignments

[yname2480]

Hi,

I am working on SharePoint, and I was using two APIs with OAuth2 authentication:

1. https://domain.sharepoint.com/sites/site001/_api/web/Webs

2. https://domain.sharepoint.com/sites/site001/_api/Web/Lists(guid'77b646d2-d1d5-45fa-a976-d6cf31a5a59f...

Previously there was full control permissions given to my app on Azure AD portal. But now I cannot use those permissions. I have to work with Read Only permissions.

So, I want only the bare minimum permissions required to use these two APIs.

[#2]

@yname2480 

Are you using Delegated Permissions or Application Permissions?

[#3]

We are using both