none
Sharepoint Online 3rd Party App Security RRS feed

  • Question

  • Just a quick general question;

    On adding 3rd party apps to our Sharepoint Online site, all apps seem to state the following under required permissions;

    "Let it access basic information about the users of this site"


    Can anyone point me to what basic user details an app is allowed to access, and can the app send this information externally (outside the site collection)? 


    Any of your thoughts would be appreciated!

    Thursday, February 6, 2014 5:25 PM

Answers

  • The user information list of all users in a SharePoint site collection (at the db level, this is the UserInfo table). It contains info such as friendly display name, login name, and e-mail address. Each SharePoint App gets access to this permission as it's necessary to identify the current user. It is possible for Apps to send such info to other locations.

    Kind regards,
    Margriet Bruggeman

    Lois & Clark IT Services
    web site: http://www.loisandclark.eu
    blog: http://www.sharepointdragons.com

    Monday, February 10, 2014 4:18 PM
    Moderator

All replies

  • The user information list of all users in a SharePoint site collection (at the db level, this is the UserInfo table). It contains info such as friendly display name, login name, and e-mail address. Each SharePoint App gets access to this permission as it's necessary to identify the current user. It is possible for Apps to send such info to other locations.

    Kind regards,
    Margriet Bruggeman

    Lois & Clark IT Services
    web site: http://www.loisandclark.eu
    blog: http://www.sharepointdragons.com

    Monday, February 10, 2014 4:18 PM
    Moderator
  • Makes sense, I guess I was hoping otherwise!

    Thank you!

    Tuesday, February 11, 2014 6:27 PM