What is the minimum permissions required to use UserProfileService web service?

[Art_Kelenzon]

What is the minimum required permissions to use UserProfileService web service with the call to a method “GetUserPropertyByAccountName” to retrieve property called “PersonalSpace”? It does work with full SharePoint Admin role, but i would like minimize this requirement for the obvious reasons.

[#2]

@Art_KelenzonI'm not 100% sure but SharePoint has a permission called "Use Remote Interfaces". This permission also requires a user to have the "Open Site" permission. The minimum permissions required would involve to create a permission level with these 2 permissions on the site through which you're calling the web services.

The default "Read" permission level also consists of these 2 permission so you might use that one as well but then you'd have more permissions than the minimum required.

[#3]

Hi @Paul Pascha, thanks for your reply. Can this be done on the tenant level so any existing as well as any new SharePoint sites are accessible. And where exactly in SharePoint/Office365 can we set such permissions?

[#4]

Hi @Art_Kelenzon, SharePoint permissions exist on the site collection level. Calling SharePoint's web services is (AFAIK) always done in the context of a certain site collection so that would be the site where you need to grant these permissions.

I don't know of any way to control these permissions more centrally at the tenant or farm level.

Depending on what solution you are using for "Site Provisioning" you could maybe incorporate some logic to add the user with required permissions for any existing site as well as new ones.