0

Testing REST calls in Postman, I registered an app in my tenant root site, got an access token but a call to get, for example, page content in a different /sites/ site collection fails with an access denied error. My question is does an access token granted for an app registered in the root site work with all sites in the tenant? Or do I need to register an app for each site collection? Do I need to change the permissions xml and use http://sharepoint/content/tenant in the scope?

<AppPermissionRequests AllowAppOnlyPolicy="true">
<AppPermissionRequest Scope="http://sharepoint/content/sitecollection/web" Right="Read" />
</AppPermissionRequests>
Improve this question
1
  • It looks like it based on MS document at here.
    – Matiur Rahman
    Commented Jun 4, 2021 at 18:06

1 Answer 1

Reset to default
1

An app registered in the root site or any other normal site will only be scoped to that site.

Register the app and apply the permission XML in the -admin site for tenant-wide access.

Improve this answer
1
  • Thanks - I was able to retrace my steps from an earlier process when it worked and figure it out.
    – matt
    Commented Jun 4, 2021 at 23:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.