Could you clarify permissions that are used by SharePoint App?

I see two cases:

  1. app works with host web
  2. app works with app web

There are three kinds of polices:

  1. User Only Policy
  2. App + User Policy
  3. App Only Policy

As I understand these polices is used to access to the host web. But what permissions is used to access app web? Does it use user only permissions? Can I create a list in the app web and send request with app only permissions?

1 Answer 1


My research on this topic reveals that the Policies apply to the App Web too.I have had an anonymous user (with no permissions) make an entry into a list in the app web. This was achieved through the App Only Policy.

When you are running under the App Only policy, the Current User is changed to the SHAREPOINT\App account which has permissions which were requested during the installation of the App. Whether the user is accessing the host web or the app web should not make much difference as far as the permissions are concerned.

My blog on this topic has some additional details if you like: http://www.vrdmn.com/2013/01/sharepoint-2013-elevate-user-access.html

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.