Microsoft message Third-party app access requirements are changing for SharePoint

Products

• CASB Security Premium
• CASB Advanced Threat Protection
• CASB Audit
• CASB Gateway
• CASB Gateway Advanced
• CASB Security Advanced
• CASB Security Advanced IAAS
• CASB Security Premium IAAS
• CASB Security Standard
• CASB Securlet IAAS
• CASB Securlet SAAS
• CASB Securlet SAAS With DLP-CDS

Issue/Introduction

Message received from Microsoft regarding changes to Third-party app requirements and SharePoint.  Message details found below:

[Action Required] Third-party app access requirements are changing for SharePoint Online Tenant Admin APIs

Action required by Jun 14, 2024

Summary

We’re implementing changes to our Admin API permission configurations.

The changes outlined in this notification will impact Microsoft 365 administrators and application developers or Azure Entra administrators. These changes can affect consumers or owners of applications authorized for access to SharePoint Online Tenant admin APIs with application and delegated scopes.

• On Friday, June 14, 2024, user-delegated permissions will require AllSites.FullControl to be configured for Microsoft Entra applications.

Resolution

There are no steps needed to be taken for this as CloudSOC does not use the User-Delegated permissions