Requirements

This page lists the SharePoint Add-In and Azure ACS assessment specific requirements and options.

Permission requirements

When using the SharePoint Add-In and Azure ACS module of the Microsoft 365 Assessment tool you do need to use a configured Entra application (learn more here). The Microsoft 365 Assessment tool aims to be able to perform the SharePoint Add-In and Azure ACS assessment using minimal permissions, as listed below.

Authentication	Minimal
Application	Graph: Sites.Read.All, Application.Read.All SharePoint: Sites.Read.All
Delegated	Graph: Sites.Read.All, Application.Read.All, User.Read SharePoint: AllSites.Read

Important

Cross check the minimally required permissions are granted, if not the scan might return inaccurate results.

Command line arguments for starting an assessment

There are no specific command line arguments when starting the SharePoint Add-In and Azure ACS assessment.

Note

To learn more about starting an assessment checkout the Microsoft 365 Assessment tool Start documentation.