SharePoint / SharePoint/sp-dev-docs
Granting access via Entra ID Application Permissions does not provide least privilege guidelines
Open
@Ashlesha-MSFT is already working on this.
Since Dec 17, 2025.
area:docs
sharepoint-developer-support
- Dominant language
- PowerShell
- Stars
- 1.4k
- Forks
- 1.1k
- Avg merge
- 4d 12h
- Merged PRs (30d)
- 12
Description
What type of issue is this?
Documentation issue / typo
What SharePoint development model, framework, SDK or API is this about?
💥 SharePoint Framework
Target SharePoint environment
SharePoint Online
What browser(s) / client(s) have you tested
- 💥 Internet Explorer
- 💥 Microsoft Edge
- 💥 Google Chrome
- 💥 FireFox
- 💥 Safari
- mobile (iOS/iPadOS)
- mobile (Android)
- not applicable
- other (enter in the "Additional environment details" area below)
Additional environment details
- browser version
- SPFx version
- Node.js version
- etc
Issue description
Page: https://learn.microsoft.com/en-us/sharepoint/dev/solution-guidance/security-apponly-azuread
Hi team,
This page does not provide any guidance for using Sites.Selected, only full tenant wide access, which is not following best security practices.
It would benefit the community to provide a zero trust, least privilege method of providing access using Sites.Selected.
Thank you,
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.