Supporting text for: https://twitter.com/dvdsmpsn/status/805807589078470656 I'm setting up a service (App registration) which needs to OAuth against Azure AD. My service is multi-tenanted, so multiple organisations will be using I have 2 accounts: - david@theconciseweb.onsharepoint.com - my dev account which is associated with a paying sharepoint online subscription - dev@appfusions.com - the corporate account with which the production service will be associated ## On the dev account I can add the relevant API Access / Required Permissions here: https://portal.azure.com/#blade/Microsoft_AAD_IAM/ApplicationBlade/objectId/9c59ced0-216f-4e6c-b12a-b2f90ad2c7bb/appId/81522dd0-de26-4ffb-a419-df1e66124798 - Windows Azure Active Directory (2 delegated permissions) - Office 365 SharePoint Online (6 application permissions, 5 delegated permissions) ## On the production account ..which does not have a SharePoint Online instance associated with it, I cannot add the **Office 365 SharePoint Online** API and select the relevant permissions. ## Questions I want to use this account as the master account for the **App registration** so that others can use *my* app and have a simple user experience when using my app -- without having to setup an app registration themselves I don't want to use this dev@appfusions.com account for SharePoint Online as it is not appropriate. - **Is there any way around this?** - **How do I get access to the Office 365 SharePoint Online API for this account for this app registration?**
@azuresupport has already suggested looking at:
- https://docs.microsoft.com/en-us/azure/active-directory/active-directory-integrating-applications
- https://docs.microsoft.com/en-us/azure/api-management/api-management-howto-aad
I've tried all of this, but there's still no “Office 365 SharePoint Online” permissions for me to select.
I want to be able to see this:
https://pbs.twimg.com/media/Cy_nu_zWQAA1j4v.jpg:large
</on>