SOLVED

Throttling: App credentials VS Service Account

%3CLINGO-SUB%20id%3D%22lingo-sub-172050%22%20slang%3D%22en-US%22%3EThrottling%3A%20App%20credentials%20VS%20Service%20Account%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-172050%22%20slang%3D%22en-US%22%3E%3CP%3EWe're%20currently%20implementing%20a%20solution%20where%20we%20would%20like%20to%20avoid%20being%20Throttled.%26nbsp%3BWe%20decided%20to%20use%20a%20Service%20Account%20because%20our%20solution%20consists%20of%20write-operations%20to%20Taxonomy%20which%20are%20not%20supported%20when%20using%20App-only%20permissions.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EDo%20we%20run%20the%20risk%20of%20getting%20throttled%20faster%20when%20making%20use%20of%20a%20Service%20Account%20compared%20to%20making%20use%20of%20App-credentials%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20Guidance%20in%20the%20article%20below%20seems%20to%20suggest%20throttling%20behavior%20is%20different%20when%20using%20App-crredentials%20compared%20to%20a%20Service%20Account%20(%22normal%22%20user).%26nbsp%3B%20As%20described%20in%20the%20article%20we%20are%20filling%20UserAgent%20for%20each%20CSOM%20query%20being%20executed%20but%20the%20article%20also%20recommends%20to%20register%20and%20use%20AppID%2FTitle%20whenever%20possible%20(which%20are%20involved%20automatically%20I%20guess%20when%20running%20in%20a%20Add-in%20context)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsharepoint%2Fdev%2Fgeneral-development%2Fhow-to-avoid-getting-throttled-or-blocked-in-sharepoint-online%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsharepoint%2Fdev%2Fgeneral-development%2Fhow-to-avoid-getting-throttled-or-blocked-in-sharepoint-online%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-172553%22%20slang%3D%22en-US%22%3ERe%3A%20Throttling%3A%20App%20credentials%20VS%20Service%20Account%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-172553%22%20slang%3D%22en-US%22%3E%3CP%3EAs%20noted%20in%20the%20documentation%2C%20using%20app%20ID%20is%26nbsp%3Brecommended%20where%20suitable.%20This%20does%20not%2C%20however%2C%20mean%20that%20you%20can't%20use%20also%20service%20accounts%2C%20as%20having%20an%20app%20ID%20registered%20does%20not%20mean%20that%20you'd%20be%20running%20in%20app-only%20mode.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20do%20not%20have%20any%20specifics%20on%20the%20detailed%20differences%20or%20impact%20of%20having%20app%20id%20or%20not%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-172051%22%20slang%3D%22en-US%22%3ERe%3A%20Throttling%3A%20App%20credentials%20VS%20Service%20Account%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-172051%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F369%22%20target%3D%22_blank%22%3E%40Vesa%20Juvonen%3C%2FA%3E%26nbsp%3Bdo%20you%20know%20a%20answer%20to%20this%20one%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1102985%22%20slang%3D%22en-US%22%3ERe%3A%20Throttling%3A%20App%20credentials%20VS%20Service%20Account%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1102985%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F56137%22%20target%3D%22_blank%22%3E%40Silas%20Ezekiels%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20get%20best%20possible%20performance%20and%20capacity%20when%20app-id%20is%20used%20with%20the%20decoration.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EUsing%20access%20token%20does%20indeed%20reduce%20throttling%20in%20the%20migration%20cases%20or%20in%20general.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1101126%22%20slang%3D%22en-US%22%3ERe%3A%20Throttling%3A%20App%20credentials%20VS%20Service%20Account%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1101126%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Vesa%2C%3CBR%20%2F%3E%3CBR%20%2F%3EMy%20query%20is%20related%20to%20migrating%20content%20to%20SPoL%20using%20service%20accounts%20and%20an%20OTS%20migration%20tool.%3CBR%20%2F%3E%3CBR%20%2F%3EI%20would%20like%20to%20know%20why%20Microsoft%20recommend%20us%20to%20use%20appID%20registration%20and%20traffic%20decoration%20if%20you%20are%20not%20clear%20on%20the%20differences%2Fbenefits%2Fimpacts%3F%3CBR%20%2F%3E%3CBR%20%2F%3EAlso%2C%20please%20can%20you%20confirm%20if%20there%20is%20a%20difference%2Freduction%20in%20throttling%20if%20an%20access%20token%20is%20used%20to%20make%20API%20calls%20to%20Azure%3F%20The%20migration%20app%20claims%20that%20this%20reduces%20the%20throttling%20MS%20applies%20to%20SharePoint%20migration%20activities.%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Super Contributor

We're currently implementing a solution where we would like to avoid being Throttled. We decided to use a Service Account because our solution consists of write-operations to Taxonomy which are not supported when using App-only permissions.

 

Do we run the risk of getting throttled faster when making use of a Service Account compared to making use of App-credentials?

 

The Guidance in the article below seems to suggest throttling behavior is different when using App-crredentials compared to a Service Account ("normal" user).  As described in the article we are filling UserAgent for each CSOM query being executed but the article also recommends to register and use AppID/Title whenever possible (which are involved automatically I guess when running in a Add-in context)

 

https://docs.microsoft.com/en-us/sharepoint/dev/general-development/how-to-avoid-getting-throttled-o...

4 Replies
Highlighted

@Vesa Juvonen do you know a answer to this one?

Highlighted
Solution

As noted in the documentation, using app ID is recommended where suitable. This does not, however, mean that you can't use also service accounts, as having an app ID registered does not mean that you'd be running in app-only mode. 

 

We do not have any specifics on the detailed differences or impact of having app id or not

 

Highlighted

Hi Vesa,

My query is related to migrating content to SPoL using service accounts and an OTS migration tool.

I would like to know why Microsoft recommend us to use appID registration and traffic decoration if you are not clear on the differences/benefits/impacts?

Also, please can you confirm if there is a difference/reduction in throttling if an access token is used to make API calls to Azure? The migration app claims that this reduces the throttling MS applies to SharePoint migration activities.

Thanks

Highlighted

@Silas Ezekiels 

 

You get best possible performance and capacity when app-id is used with the decoration.

 

Using access token does indeed reduce throttling in the migration cases or in general.