I have some confusion after reading Microsoft Docs for App registration for Microsoft Graph API. I will explain you my tenant structure
- E5 Account
- Tenant is conditional MFA enable. That means when user access SharePoint Online inside the companies network then it will not ask for MFA, it will ask only username and password but if it is access outside from companies network then it will ask for Mobile App Code
We are using SharePoint Online as our Intranet Portal. Now companies requirement is to make mobile application in native language of iOS and Android. There are some section on the mobile application certain people can add/delete records.
So please somebody can guide me for configuring Microsoft Graph API user can access/add/delete record as per their permission on SharePoint Online.
I am succeed in configuring Microsoft Graph API where my application generate access token, but confusion is that I have given permission to Graph API
Site.Read.All but how can I delegate permission which he have on SharePoint Online. For example if user have read and not add permission than it should take only read through Graph API.
Hope I could explain my question