Microsoft SharePoint Online connector for Amazon AppFlow

Question

How does the AWS managed client app for SharePoint access SharePoint sites and what permissions are granted to it?

Is it, by default, the recommended ones [2]:
offline_access
Sites.Read.All
Sites.ReadWrite.All
User.Read

[1]
https://docs.aws.amazon.com/appflow/latest/userguide/connectors-microsoft-sharepoint-online.html#microsoft-sharepoint-online-prereqs:~:text=The%20AWS-,managed,-client%20app%20for%20Sharepoint%20simplifies

[2]
https://docs.aws.amazon.com/appflow/latest/userguide/connectors-microsoft-sharepoint-online.html#microsoft-sharepoint-online-prereqs:~:text=Add%20the%20following-,recommended,-permissions%3A

[3] MS permissions:
https://learn.microsoft.com/en-us/azure/active-directory/develop/permissions-consent-overview#using-the-admin-consent-endpoint

Answer

The AWS managed client app for SharePoint accesses SharePoint sites via the SharePoint REST APIs. It requires the following permissions to be granted:

Sites.Read.All - Allows the app to read metadata about sites across the organization.
List.Read.All - Allows the app to read lists and document libraries across sites.
Web.Read.All - Allows the app to read web parts and other metadata about pages.
Profile.Read.All - Allows the app to read user profile information.
TermStore.Read.All - Allows the app to read taxonomy metadata.

Microsoft SharePoint Online connector for Amazon AppFlow

Contenuto pertinente