Publish SharePoint provider hosted add-in with Full Control permission to office store. RRS feed

  • Question

  • Hi,

    We are submitting SharePoint provider hosted add-in to Microsoft store. As per Microsoft validation policies it doesn't allow Full Control apps to be published to office store. 
    The purpose to give full control for this our add-in is, we are adding sandbox wsp file to solution gallery and deploying it to the host web [through this Add-in]. This wsp creates required lists in host web. As this task requires admin permission, so we have given it Full control permission to our add-in.  Now with Full control permission we are not able to submit add-in office store.  

    Kindly suggest alternative solution. 
    Wednesday, December 5, 2018 6:30 AM

All replies

  • Hi

    The permission Scope Web will allow you to work with Host web site. Suppose you have a site collection at url http://sitename. And under it you have a sub site http://sitename/subsite. Now you deploy an app in the subsite. So the subsite will be the Host web. Now you want to create a list in subsite so you will need to provide Web Scope. However, if you want to create a list in http://sitename you will need to give Site Collection scope. However, if you are directly deploying the app under root site collection and just want to create a list in Host Web, then WebScope is sufficient. Secondly, Manage permissions are enough to create a list in Host Web. Lastly, Microsoft won't allow Full Control permission based apps because of data security issues. It is like saying give my app permissions to mess with your data.

    Wednesday, December 5, 2018 4:50 PM
  • Hi Tina,

    Thanks for the reply.

    Adding wsp file with Manage permission on site is throwing an error as "Access Denied". I have found one alternative is to create list using CSOM c#.

    Is there any another alternative for this?

    Thursday, December 6, 2018 5:32 AM