root.authorization.permissions object

List of permissions that the app needs to function.

Properties that reference this object type:

root.authorization.permissions

Syntax

{
 "resourceSpecific": [
 {
 "name": "{string}",
 "type": "Application | Delegated"
 }
 ]
}

{
 "type": "object",
 "description": "List of permissions that the app needs to function.",
 "additionalProperties": false,
 "properties": {
 "resourceSpecific": {
 "description": "Permissions that guard data access on a resource instance level.",
 "maxItems": 16,
 "type": "array",
 "uniqueItems": true,
 "items": {
 "type": "object",
 "additionalProperties": false,
 "properties": {
 "name": {
 "type": "string",
 "description": "The name of the resource-specific permission.",
 "maxLength": 128
 },
 "type": {
 "type": "string",
 "enum": [
 "Application",
 "Delegated"
 ],
 "description": "The type of the resource-specific permission."
 }
 },
 "required": [
 "name",
 "type"
 ]
 }
 }
 }
}

{
 "resourceSpecific": [
 {
 "name": "{string}",
 "type": "Application | Delegated"
 }
 ]
}

{
 "type": "object",
 "description": "List of permissions that the app needs to function.",
 "additionalProperties": false,
 "properties": {
 "resourceSpecific": {
 "description": "Permissions that must be granted on a per resource instance basis.",
 "maxItems": 16,
 "type": "array",
 "uniqueItems": true,
 "items": {
 "type": "object",
 "additionalProperties": false,
 "properties": {
 "name": {
 "type": "string",
 "description": "The name of the resource-specific permission.",
 "maxLength": 128
 },
 "type": {
 "type": "string",
 "enum": [
 "Application",
 "Delegated"
 ],
 "description": "The type of the resource-specific permission: delegated vs application."
 }
 },
 "required": [
 "name",
 "type"
 ]
 }
 }
 }
}

Properties

resourceSpecific

Permissions that guard data access on resource instance level.

Type
Array of resourceSpecific

Required
—

Constraints
Maximum array items: 16. Array items must be unique.

Supported values

Examples

{
 "authorization": {
 "permissions": {
 "resourceSpecific": [
 {
 "type": "Application",
 "name": "ChannelSettings.Read.Group"
 },
 {
 "type": "Delegated",
 "name": "ChannelMeetingParticipant.Read.Group"
 }
 ]
 }
 }
}

Feedback

Was this page helpful?

Additional resources

Last updated on

URL: https://learn.microsoft.com/en-us/microsoft-365/extensibility/schema/root-authorization-permissions?view=m365-app-1.28