Permissions Required for Application

The Virto Alerts application requires both Delegated and Application permissions.

Delegated Permissions#

Delegated permissions are used to authorize users and manage frontend functionalities such as alerts.

Application Permissions#

Application permissions are used for background services. Specifically, they are required for:

1. Handling List Changes and Generating Emails: This involves reading users, groups, and SharePoint list items based on alert configurations.
2. Updating List Webhook Subscriptions: To receive notifications of list changes, the application requires permissions similar to “List.Manage.” However, since this specific permission is not available via the API, “Sites.Manage.All” is requested instead.