I want to create an App that registers a custom script link at each page of the SharePoint website.

Is there a way to achieve this in such way that the app does not need full control permission?

We have implemented this by creating a UserCustomAction with location="ScriptLink" but it requires Full Controll permissions. And as we know, Apps that request full-control permissions are not accepted in the Office Store.


1 Answer 1


Do not execute the code from your App installer.

Let the code be executed by the installed App,
that will run the code with the users rights, so requires a Site Collection admin by preference

  • Sorry I didn't get you. Can you add more details, please? Currently the code is added on the App Web page. So user goes to App Web and then clicks our Install button that run our installation code.
    – Serhiy
    Commented Sep 23, 2015 at 7:15
  • This is an interesting thought, but how to do it? All App code in app web runs in context of App+User rights. With manage permissions we can't even create an .aspx file in host web.
    – Prakash
    Commented Dec 16, 2015 at 8:19
  • Yes, if you can not get into the house you can not move the furniture. So you need someone accepted into the house first who lets you in. An easier non-Addin approach is to let users execute a Bookmarklet But with at least write access Add-ins can add JavaScript into some weird SharePoint locations. Commented Dec 16, 2015 at 9:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.