Skip to main content
← Back to Changelog

Sneezeweet

  • Available on Insiders

EasyLife 365 Collaboration now lets unattended integrations call the administration API with application permissions, so a daemon or scheduled job no longer needs a signed-in user.

What’s new?

Application permissions for the administration API

  • The administration API now accepts application permissions in addition to delegated ones, so a daemon, scheduled script or function app can call it while authenticating as itself.
  • Grant Collab.Manage.ReadWrite.All on the EasyLife 365 Admin application to manage groups, guests, OneDrive sites, SharePoint sites and metadata fields, or Collab.Config.ReadWrite.All for the full administration surface.
  • Application permissions require admin consent. Once granted, the roles are carried in the access token and no user context is involved.
  • The user-facing creation endpoints are unchanged and remain delegated-only, always acting on behalf of a signed-in user.
  • See Create Application Registration for the app-only setup.

How these updates will affect you

  • Integrations that manage templates and policies no longer need a dedicated service account or an interactive sign-in.
  • Admins can scope an integration to the manage endpoints alone instead of granting it the full administration surface.
  • Existing delegated integrations are unaffected — the delegated scope continues to work exactly as before.

Have questions? Reach out to us for more information.