Admin consent permissions

Administrator consent is required to allow ESET Cloud Office Security access to your Microsoft 365 tenant data. Use a Microsoft Entra user account that has one of the following roles

•Global Administrator

•Privileged Role Administrator

•A custom Microsoft Entra ID role with specific App consent permissions.

The list of specific permissions required by ESET Cloud Office Security to provide tenant-wide consent and grant access:

API / Permissions name	Type	Description	Admin consent request
Microsoft Graph
Application.ReadWrite.OwnedBy	Application	Manage apps that this app creates or owns	Yes
Directory.Read.All	Application	Read directory data	Yes
Files.ReadWrite.All	Application	Read and write files in all site collections	Yes
Group.Read.All	Application	Read all groups	Yes
Mail.ReadWrite	Application	Read and write mail in all mailboxes	Yes
MailboxSettings.Read	Application	Read all user mailbox settings	Yes
Member.Read.Hidden	Application	Read all hidden memberships	Yes
Sites.FullControl.All	Application	Have full control of all site collections	Yes
User.Read.All	Application	Read all users' full profiles	Yes
SharePoint
Sites.FullControl.All	Application	Have full control of all site collections	Yes

˄˅