I have created app catalog for a site collection as described here. I am able to use this catalog to install apps that require normal site level permissions.
I have an app that requires read permission at tenant level:
<AppPermissionRequest Scope="http://sharepoint/social/tenant" Right="Read" /> <AppPermissionRequest Scope="http://sharepoint/content/tenant" Right="Read" />
This app is added in the site collection app catalog. When I click to install this app it shows message "You can't add this app here." And on clicking "Find out why" it shows:
I guess apps requiring permissions beyond site collection are not allowed via the site collection catalog. Can anyone confirm this?