Minimum Scope

SharePoint Online

These Microsoft 365 roles and permissions, or minimum scope, are required for ManageEngine SharePoint Manager Plus.

Table 1: Service account- Permissions required

Modules Permissions Needed
Reporting, management, and migration SharePoint Administrator from Microsoft 365 Admin Center.
Auditing Audit Log and View-Only Audit Logs roles from the Exchange Admin portal or Exchange Administrator role from the Microsoft 365 Admin Center.
Note: The site collection admin permission is required for the respective site collections to perform any operations if Azure application is not configured.

Table 2: Azure application- Permissions required

Modules API Permissions Needed
Reporting, management, and migration SharePoint Sites.FullControl.All
Auditing Office 365 Management APIs ActivityFeed.Read
Monitoring Microsoft Graph ServiceHealth.Read.All
Mail server Microsoft Graph SMTP.Send

SharePoint on-premises

These roles and permissions, or minimum scope, should be assigned to the service account used to configure the SharePoint servers in SharePoint Manager Plus.

Note: The site collection admin permission is required for the respective site collections to perform any operations.

Modules Permissions Needed
Reporting, management, and migration
  • User should be a member of the default administrator group of the SharePoint server.
  • User should be a member of the FarmAdministrators group. Open Central Web Administration and add the user to the FarmAdministrator group.
  • Require this GPO setting if the product is not installed on a SharePoint server.
Auditing Site collection audit settings must be enabled for the respective site collections.
IIS log reports User should be a member of the default administrator group of the IIS server.

Copyright © 2024, ZOHO Corp. All Rights Reserved.