Sneezeweet
- Available on Insiders
EasyLife 365 Collaboration now lets unattended integrations call the administration API with application permissions, so a daemon or scheduled job no longer needs a signed-in user.
What’s new?
Application permissions for the administration API
- The administration API now accepts application permissions in addition to delegated ones, so a daemon, scheduled script or function app can call it while authenticating as itself.
- Grant
Collab.Manage.ReadWrite.Allon the EasyLife 365 Admin application to manage groups, guests, OneDrive sites, SharePoint sites and metadata fields, orCollab.Config.ReadWrite.Allfor the full administration surface. - Application permissions require admin consent. Once granted, the roles are carried in the access token and no user context is involved.
- The user-facing creation endpoints are unchanged and remain delegated-only, always acting on behalf of a signed-in user.
- See Create Application Registration for the app-only setup.
How these updates will affect you
- Integrations that manage templates and policies no longer need a dedicated service account or an interactive sign-in.
- Admins can scope an integration to the manage endpoints alone instead of granting it the full administration surface.
- Existing delegated integrations are unaffected — the delegated scope continues to work exactly as before.