Granting access to APIs

The app requires access to additional resources outside of SharePoint to enable its advanced features. A Global Administrator has to grant access to ensure the app functionality is not limited.

Some permissions are granted directly through the app components and some are granted through SharePoint Admin page.

SharePoint Admin API management

Here you grant two permissions:

  • Access to Azure AD - allows modern forms to query AD group membership to allow you to use rules in the form that are specific to users in certain AD groups.
  • Access to Exchange Calendars - required by Calendar web part to be able to read Exchange Calendars. You do not need to grant this permission if you are not planning to display users' Exchange calendars in the web part.

To grant the permissions, you need to do the following

  • Click on the waffle menu in the top left corner, then click on the Admin app
  • Under Admin centers in the left menu, click on SharePoint
  • On the left menu click on API access under Advanced

    Here you should be able to see the pending approval request for special permissions:
    • Microsoft Graph / Directory.Read.All -  required for Modern forms, allowing them to check Azure AD group membership of the current user when applying various form rules.
    • Microsoft Graph / Calendars.ReadWrite.Shared - access to Exchange calendars (only needed when Calendar web part is used to connect to Exchange calendars)

Component-specific permissions

Various components of Ultimate Forms require additional permissions, depending on the features you use. In most cases, the permission is requested when a certain feature is used for the first time (for example, when setting up Import form Exchange Online, it will request access to Exchange mailboxes).

All permissions are granted at the tenant level and only need to be granted once. You can examine and, if needed, revoke the grants under Enterprise Applications on your Azure AD Admin page

IMPORTANT: Alerts need to be granted two permissions upon initial installation to ensure alerts can be delivered via Exchange Online and Azure AD group membership can be queried for the purposes of security trimming of recipients.

  • Enter Ultimate Forms as a Global Administrator and Site Collection administrator.
  • Click on Alerts
  • Switch to Administration tab
  • Test and grant both Exchange and Azure AD permissions


Also read these:

Last modified: 9/9/2021 10:13 PM

Add your comment

Comments are not designed to replace support calls. If you have a specific issue with one of our products, please send an email to to open a support ticket.
Infowise logo
© 2005-2021 Infowise Solutions Ltd
Microsoft partner logo
GSA Schedule
Request a Live Demo

Book an appointment for a one-on-one with an ULTIMATEforms expert trainer.

Test drive the awesome power of ULTIMATEforms

Learn how to quickly and easily turn time-consuming business processes into automated, efficient workflows.

Have a strong start

Only thirty minutes of well-coached time can translate into great future savings in time and money. So, sit back and enjoy the ride.

It's Free

Learn how to address business process pain points immediately. Save time and money.