check before: 2025-03-15
Product:
Entra, Microsoft 365 admin center, SharePoint
Platform:
Online, World tenant
Status:
Change type:
Admin impact, New feature, Updated message
Links:
Details:
Summary:
Changes to the SharePoint Online API access page will display additional pre-authorized permissions. Rollout for Targeted Release starts mid-March 2025, completing by mid-March 2025, and for General Availability from late March to early May 2025. No admin action is required, but documentation updates may be needed.
Details:
Updated April 17, 2025: We have updated the rollout timeline below. Thank you for your patience.
The API access page in the Microsoft SharePoint admin center will soon display a set of additional permissions that have been automatically pre-authorized by Microsoft. These permissions are required for SharePoint Online to function properly.
Tenant admins can remove the permissions (and add them back to the API access page), but these actions could compromise some out-of-the-box functionalities provided by SharePoint.
[When this will happen:]
Targeted Release: We will begin rolling out mid-March 2025 and expect to complete by mid-March 2025.
General Availability (Worldwide): We will begin rolling out late March 2025 and expect to complete by early May 2025 (previously early April).
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
Created:
2025-03-18
updated:
2025-04-18
Task Type
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS How does it affect me
XXXXXXX ... free basic plan only
MS Preperations
XXXXXXX ... free basic plan only
MS Urgency
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
Microsoft is enhancing SharePoint Online's API access by pre-authorizing additional permissions, with a phased rollout starting in mid-March 2025, to improve functionality and security without requiring immediate action from administrators.
Direct effects for Operations**
Increased Permissions Visibility
The change will display additional pre-authorized permissions, which may lead to confusion among users regarding what permissions are granted and their implications.
- roles: Tenant Admin, End User
- references: https://learn.microsoft.com/sharepoint/api-access?WT.mc_id=365AdminCSH_spo
Potential Functionality Compromise
If tenant admins remove the pre-authorized permissions, it could compromise out-of-the-box functionalities of SharePoint, affecting user experience and productivity.
- roles: Tenant Admin, End User
- references: https://learn.microsoft.com/sharepoint/api-access?WT.mc_id=365AdminCSH_spo
Documentation Updates Required
The change may necessitate updates to internal documentation, which if not done, could lead to misinformation and operational inefficiencies.
- roles: Tenant Admin, Support Staff
- references: https://learn.microsoft.com/sharepoint/api-access?WT.mc_id=365AdminCSH_spo
Configutation Options**
XXXXXXX ... paid membership only
Opportunities**
Enhanced Security through Pre-Authorized Permissions
The introduction of additional pre-authorized permissions simplifies the management of API access, reducing the risk of unauthorized access and improving overall security posture. This allows for more streamlined compliance with security policies.
- next-steps: Review the new permissions to ensure they align with existing security protocols and update security documentation accordingly.
- roles: IT Security Manager, Compliance Officer, System Administrator
- references: https://learn.microsoft.com/sharepoint/api-access?WT.mc_id=365AdminCSH_spo
Improved User Experience with Streamlined API Management
The automatic pre-authorization of permissions reduces the complexity of API management for tenant admins, allowing them to focus on higher-value tasks rather than routine permission management.
- next-steps: Conduct training sessions for tenant admins on how to leverage the new API access features effectively and to encourage best practices in API management.
- roles: SharePoint Administrator, IT Manager, User Experience Designer
- references: https://learn.microsoft.com/sharepoint/api-access?WT.mc_id=365AdminCSH_spo
Documentation and Training Optimization
With the upcoming changes, there is an opportunity to update internal documentation and provide training to ensure all users are aware of the new functionalities and their implications, enhancing overall user proficiency with SharePoint.
- next-steps: Create a project plan to update documentation and schedule training sessions for relevant staff to familiarize them with the new features and best practices.
- roles: Training Coordinator, Technical Writer, IT Support Staff
- references: https://learn.microsoft.com/sharepoint/api-access?WT.mc_id=365AdminCSH_spo
Potentional Risks**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
change history
| Date | Property | old | new |
| 2025-04-18 | MC Last Updated | 04/02/2025 16:58:54 | 2025-04-17T17:11:56Z |
| 2025-04-18 | MC Messages | Updated April 2, 2025: We have updated the rollout timeline below. Thank you for your patience.
The API access page in the Microsoft SharePoint admin center will soon display a set of additional permissions that have been automatically pre-authorized by Microsoft. These permissions are required for SharePoint Online to function properly. Tenant admins can remove the permissions (and add them back to the API access page), but these actions could compromise some out-of-the-box functionalities provided by SharePoint. [When this will happen:] Targeted Release: We will begin rolling out mid-March 2025 and expect to complete by mid-March 2025. General Availability (Worldwide): We will begin rolling out late March 2025 and expect to complete by early April 2025 (previously late March). | Updated April 17, 2025: We have updated the rollout timeline below. Thank you for your patience.
The API access page in the Microsoft SharePoint admin center will soon display a set of additional permissions that have been automatically pre-authorized by Microsoft. These permissions are required for SharePoint Online to function properly. Tenant admins can remove the permissions (and add them back to the API access page), but these actions could compromise some out-of-the-box functionalities provided by SharePoint. [When this will happen:] Targeted Release: We will begin rolling out mid-March 2025 and expect to complete by mid-March 2025. General Availability (Worldwide): We will begin rolling out late March 2025 and expect to complete by early May 2025 (previously early April). |
| 2025-04-18 | MC End Time | 05/30/2025 09:00:00 | 2025-06-16T09:00:00Z |
| 2025-04-18 | MC Summary | The API access page in the SharePoint admin center will soon show additional pre-authorized permissions required for functionality. Rollout starts mid-March 2025 for Targeted Release and late March 2025 for General Availability. No admin action is needed, but documentation updates may be necessary. | Changes to the SharePoint Online API access page will display additional pre-authorized permissions. Rollout for Targeted Release starts mid-March 2025, completing by mid-March 2025, and for General Availability from late March to early May 2025. No admin action is required, but documentation updates may be needed. |
| 2025-04-03 | MC Messages | The API access page in the Microsoft SharePoint admin center will soon display a set of additional permissions that have been automatically pre-authorized by Microsoft. These permissions are required for SharePoint Online to function properly.
Tenant admins can remove the permissions (and add them back to the API access page), but these actions could compromise some out-of-the-box functionalities provided by SharePoint. [When this will happen:] Targeted Release: We will begin rolling out mid-March 2025 and expect to complete by mid-March 2025. General Availability (Worldwide): We will begin rolling out late March 2025 and expect to complete by late March 2025. | Updated April 2, 2025: We have updated the rollout timeline below. Thank you for your patience.
The API access page in the Microsoft SharePoint admin center will soon display a set of additional permissions that have been automatically pre-authorized by Microsoft. These permissions are required for SharePoint Online to function properly. Tenant admins can remove the permissions (and add them back to the API access page), but these actions could compromise some out-of-the-box functionalities provided by SharePoint. [When this will happen:] Targeted Release: We will begin rolling out mid-March 2025 and expect to complete by mid-March 2025. General Availability (Worldwide): We will begin rolling out late March 2025 and expect to complete by early April 2025 (previously late March). |
| 2025-04-03 | MC Title | Microsoft SharePoint Online: Changes to the API access page in the SharePoint admin center | (Updated) Microsoft SharePoint Online: Changes to the API access page in the SharePoint admin center |
| 2025-04-03 | MC Last Updated | 03/18/2025 00:59:45 | 2025-04-02T16:58:54Z |
| 2025-04-03 | MC MessageTagNames | New feature, Admin impact | Updated message, New feature, Admin impact |
| 2025-04-03 | MC Summary | The API access page in the SharePoint admin center will soon display additional pre-authorized permissions required for SharePoint Online. This change will roll out in March 2025, with no impact on customers and no admin action needed. The API access page is available if the application catalog is provisioned. | The API access page in the SharePoint admin center will soon show additional pre-authorized permissions required for functionality. Rollout starts mid-March 2025 for Targeted Release and late March 2025 for General Availability. No admin action is needed, but documentation updates may be necessary. |
Last updated 8 months ago ago
