SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm working in a sub-site of a sharepoint 2013 online site called "projects".

Following the blog post at

In one section, it has the app permissions listed as

   <AppPermissionRequest Scope="http://sharepoint/content/sitecollection" Right="FullControl" />

Does the permissions need to be set to FullControl for the sitecollection?

Or will the call to SP.WebInfoCreation at work at the, for example, sitecollection/web scope?

I've tried the web scope and the call returned unauthorized, but I don't know if the authorization is due to the wrong scope level, or if it is due to other issues.

The powers-to-be are hesitating in giving full control at the site collection level.

I've done quite a bit of searching on msdn. Is there a page that explains the required permission scopes required for the various rest api's?

share|improve this question
Does the user have the ability to create a site? Unless you're using app-only permissions, the user still needs permission to create a site. – wjervis Apr 11 '14 at 12:46
Just finished reading the blog you posted. Not sure how workflows work with app permissions, so my previous comment may not be helpful. – wjervis Apr 11 '14 at 12:54
as mentioned in the post, the "Workflows can use app permissions" is active (step 6) – James Bradt Apr 11 '14 at 13:06
Yes, but with apps, the app requires permissions from the site, but the user still requires permissions as well (unless app-only permissions is enabled). Not sure if this is the same with workflows using app permissions or not. – wjervis Apr 11 '14 at 13:50
up vote 0 down vote accepted

Based upon experimentation,

<AppPermissionRequest Scope="http://sharepoint/content/sitecollection" Right="FullControl" />

is required for a subsite to be created within a specific site collection.

I was not able to find any link that describes the permission scopes required for various REST api's

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.