I have an azure app registration named "Integration-Test", and i granted this app registration Write permission on selected site: -

Grant-PnPAzureADAppSitePermission -Permissions "Write" -Site $siteUrl -AppId $clientId -DisplayName "Integration-Test"

This Write permission, will mimic the Contribute permission inside SharePoint, where you can add,edit,delete items and documents, but you cannot modify, delete, add lists and libraries. but can i restrict this further so that app registration will have Write without delete, which mimic SharePoint contribute without delete permission level?


  • 1
    I don't think it is possible as you only have these options: Read|Write|Manage|FullControl. Also, "contribute without delete" is not a SharePoint default permission level. Nov 20, 2023 at 14:36
  • @GaneshSanap-MVP i mean you can create a custom permission level in sharepoint to allow for Contribute without delete Nov 20, 2023 at 14:44
  • @GaneshSanap-MVP then can i restrict the azure registration app to have permission on specific lists within the selected site? or this is not possible also? Nov 20, 2023 at 14:45
  • 1
    As per my knowledge Azure AD app can have permissions at site level using Sites.Selected permissions but not at list level. Nov 20, 2023 at 14:51


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.