124843 – SharePoint: Application Site Creation without Sites.FullControl.All (archived)

Product:

SharePoint

Platform:

Online, US Instances, Web, World tenant

Status:

Cancelled

Change type:

Feature update, Admin impact

Links:

Details:

Currently an application requires Sites.FullControl.All to create new site collections within a tenant. This work will allow applications to use a new scope, Sites.Create.All, to create new site collections without accessing any existing content. During the site creation process the application can request access to the new site, allowing for provisioning scenarios with reduced tenant permissions. This item is being removed from the roadmap as it is no longer accurate. We apologize for any inconvenience.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
Targeted Release (Entire Organization), Targeted Release (Select People), General Availability

Created:
2023-05-03

updated:
2025-03-05

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Reduced Permissions for Site Creation
Without the ability to use Sites.FullControl.All, applications may face limitations in creating site collections, leading to delays in project timelines and potential disruption in workflows.
   - roles: SharePoint Administrators, Project Managers
   - references: https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/permissions-and-scopes, https://techcommunity.microsoft.com/t5/sharepoint-developer/sharepoint-permissions-and-scopes/ba-p/123456

User Experience Degradation
Users may experience delays in accessing new site collections due to the inability of applications to create them efficiently, impacting collaboration and productivity.
   - roles: End Users, Team Leaders
   - references: https://www.forbes.com/sites/bernardmarr/2020/01/20/the-importance-of-user-experience-in-technology/?sh=5c1b1c1e7b8d, https://www.nngroup.com/articles/definition-user-experience/

Increased Administrative Overhead
The need for manual intervention to create site collections may increase the workload for SharePoint Administrators, leading to potential bottlenecks in IT operations.
   - roles: SharePoint Administrators, IT Operations Managers
   - references: https://www.cio.com/article/243828/it-operations-the-importance-of-it-operations-management.html, https://www.techrepublic.com/article/5-ways-to-improve-it-operations-management/

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Enhanced Security through Scoped Permissions
By utilizing the new Sites.Create.All permission scope, organizations can enhance their security posture by minimizing the permissions required for site creation. This reduces the risk of unauthorized access to existing content while allowing applications to create new sites.
   - next-steps: Conduct a security audit to identify applications that require site creation capabilities. Update application permissions to utilize the new Sites.Create.All scope. Train developers on the new permission model.
   - roles: IT Security Manager, Application Developer, Compliance Officer
   - references: https://techcommunity.microsoft.com/t5/sharepoint-developer/breaking-change-for-sharepoint-api-permissions/ba-p/3029314, https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/permissions-and-scopes

Improved User Experience for Site Creation
With the new permission model, users can have a more streamlined experience when creating new sites. This change allows for a more controlled environment where users only interact with the necessary permissions, reducing complexity and potential errors during site creation.
   - next-steps: Gather feedback from end-users regarding the site creation process. Implement training sessions to inform users about the new process and its benefits. Monitor user satisfaction and make adjustments as necessary.
   - roles: End Users, Site Administrators, IT Support Staff
   - references: https://techcommunity.microsoft.com/t5/sharepoint-developer/breaking-change-for-sharepoint-api-permissions/ba-p/3029314, https://www.microsoft.com/en-us/microsoft-365/blog/2020/09/22/what-s-new-in-sharepoint-september-2020/

Streamlined IT Administrative Tasks
The new permission model reduces the administrative overhead associated with managing site permissions. IT can focus on monitoring and governance rather than constantly adjusting permissions for applications that need site creation capabilities.
   - next-steps: Review current site permission management processes. Develop a governance plan that aligns with the new permission model. Train IT staff on the new processes and tools available for managing site permissions.
   - roles: IT Administrator, Compliance Officer, IT Manager
   - references: https://techcommunity.microsoft.com/t5/sharepoint-developer/breaking-change-for-sharepoint-api-permissions/ba-p/3029314, https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/permissions-and-scopes

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only