I am currently developing a SharePoint Provider-hosted-Add-In which should be run on O365.
I added FullControl to the SiteCollection and Web and everything worked fine. FullControl is not allowed, though.
So I tried Managed instead of FullControl, but that gave me an access denied when creating the Groups.
So my questions are:
- What are the minimum requirements to create groups in O365?
- Are there other (less) permissions needed to add users to an existing group?
- As the groups only have to be created after installation: Can the app have low permissions but use the Administrators level to create those groups?
I already tried
SharePointContextProvider.CreateUserClientContextForSPHost() but still got an access denied, even though the user can create groups manually.