Minimum Scope

    SharePoint Online

    These Microsoft 365 roles and permissions, or minimum scope, are required for ManageEngine SharePoint Manager Plus.

    Table 1: Service account- Permissions required

    Modules Permissions Needed
    Reporting, management, and migration SharePoint Administrator from Microsoft 365 Admin Center.
    Note The site collection admin permission is required for the respective site collections to perform any operations if Azure application is not configured.

    Table 2: Azure application- Permissions required

    Modules API Permissions Needed
    Reporting, management, and migration SharePoint Sites.FullControl.All
    Auditing Office 365 Management APIs ActivityFeed.Read
    Monitoring Microsoft Graph ServiceHealth.Read.All
    Mail server Microsoft Graph Mail.Send

    SharePoint on-premises

    These roles and permissions, or minimum scope, should be assigned to the service account used to configure the SharePoint servers in SharePoint Manager Plus.

    Note The site collection admin permission is required for the respective site collections to perform any operations.

    Modules Permissions Needed
    Reporting, management, and migration
    • User should be a member of the default administrator group of the SharePoint server.
    • User should be a member of the FarmAdministrators group. Open Central Web Administration and add the user to the FarmAdministrator group.
    • Require this GPO setting if the product is not installed on a SharePoint server.
    Auditing Site collection audit settings must be enabled for the respective site collections.
    IIS log reports User should be a member of the default administrator group of the IIS server.