Minimum Scope

These Microsoft 365 roles and permissions, or minimum scope, are required for ManageEngine SharePoint Manager Plus.

Table 1: Service account- Permissions required

Modules Permissions Needed
Reporting, management, and migration SharePoint Administrator from Microsoft 365 Admin Center.
Note: The site collection admin permission is required for the respective site collections to perform any operations if Azure application is not configured.

Table 2: Azure application- Permissions required

Modules API Permissions Needed
Reporting, management, and migration SharePoint Sites.FullControl.All
Auditing Office 365 Management APIs ActivityFeed.Read
Monitoring Microsoft Graph ServiceHealth.Read.All
Mail server Microsoft Graph Mail.Send

These roles and permissions, or minimum scope, should be assigned to the service account used to configure the SharePoint servers in SharePoint Manager Plus.

Note: The site collection admin permission is required for the respective site collections to perform any operations.

Modules Permissions Needed
Reporting, management, and migration
  • User should be a member of the default administrator group of the SharePoint server.
  • User should be a member of the FarmAdministrators group. Open Central Web Administration and add the user to the FarmAdministrator group.
  • Require this GPO setting if the product is not installed on a SharePoint server.
Auditing Site collection audit settings must be enabled for the respective site collections.
IIS log reports User should be a member of the default administrator group of the IIS server.

On this page

Copyright © 2025, ZOHO Corp. All Rights Reserved.