Documentation

Permissions in Microsoft 365 app

Ultimate Forms for Microsoft 365 requires various permissions to enable it to automate your business processes and access your business data.

When installed on a site, it requests and must be granted Full Control permission for the site collection. Therefore only site collection administrators are able to install the app.

NOTE: when you are installing the app from Office Store (not recommended!), it is not possible to request Full Control due to the store restrictions. In this case, an additional app, App Support, must be installed through the enterprise App Catalog. This app will then request Full Control and grant this permission to Ultimate Forms. Make sure to always grant App Support's permissions last. If you then install Ultimate Forms within another site of the same site collection, it will cause the permissions to be lowered again and the permissions of App Support have to be re-applied through Site Contents --> App Support --> Permissions (in the context menu).

Specific components of Ultimate Forms might require additional permissions to accomplish specific tasks.

Tab, column and view permissions

Custom scripting must be allowed in SharePoint Administration. We require this to be able to add management scripts to your forms and views.

Some modern site add Deny permission for adding and modifying pages. This permission must be removed to enable form customization.

Actions

Print action requires Send access to all mailboxes on Exchange Online when set to deliver via email.  A Global Administrator must grant this permission when saving your first such action.

Exchange action requires access to all event calendars on Exchange Online. A Global Administrator must grant this permission when saving your first such action.

Active Directory action requires read/write access to your Azure Active Directory. A Global Administrator must grant this permission when saving your first such action.

Manage Teams action requires read/write access to your Microsoft teams. A Global Administrator must grant this permission when saving your first such action.

Alerts

Alerts require Send and Write access to all mailboxes on Exchange Online. A Global Administrator needs to grant this permission through Alert Administration. If the permission is not granted, alerts will still work in a reduced capacity.

End users are only allowed to select a pre-authorized mailbox as the sender account for an alert they are creating (they can also select their own mailbox). Site collection administrators manage the list of Authorized Senders, scoped to a site collection, under Alerts -> Administration.

Read access to Azure Active Directory is required to perform security trimming based on Azure AD groups. A Global Administrator needs to grant this permission through Alert Administration. If the permission is not granted, some recipients might not receive alerts if their permissions are granted through AD groups.

Import

Read and Write access to all mailboxes on Exchange Online is required if you configure import from O365 mailboxes. A Global Administrator needs to grant this permission when first such profile is configured.

Event Calendar

Read and Write access to all event calendars on Exchange Online is required if you configure Exchange as your calendar data source. A Global Administrator needs to grant this permission when first such profile is configured.

Print

When sending the print-out in email, Send permissions for the specific user's mailbox are required. The permissions are requested in real time through a pop-up window (make sure your pop-up blocker is disabled). The permission grant is stored for up to 6 months.

 


Also read these:

Last modified: 7/22/2021 3:40 PM
Loading...

Add your comment

Comments are not designed to replace support calls. If you have a specific issue with one of our products, please send an email to support@infowisesolutions.com to open a support ticket.
Infowise logo
© 2005-2021 Infowise Solutions Ltd
Microsoft partner logo
GSA Schedule
Request a Live Demo

Book an appointment for a one-on-one with an ULTIMATEforms expert trainer.

Test drive the awesome power of ULTIMATEforms

Learn how to quickly and easily turn time-consuming business processes into automated, efficient workflows.

Have a strong start

Only thirty minutes of well-coached time can translate into great future savings in time and money. So, sit back and enjoy the ride.

It's Free

Learn how to address business process pain points immediately. Save time and money.