The process of building custom applications and tools that interact with Microsoft SharePoint, including SharePoint Online in Microsoft 365.
Hi RobWindsor,
thanks a lot for your great answer. This helps me a lot.
A few points are still not clear to me:
Okay, I grant my Azure app specific permissions. And with the combination of the client ID and the certificate my console app can perform specific actions (in your example, the console app can read data from SharePoint sites.)
Does this mean, that the permissions of the console app are valid for each and every SharePoint site of the tenant?
What if I want to limit the permissions of the console app to a specific SharePoint site?
I hope you understand what's my point here: If you cannot limit the permissions of the app to certain SharePoint sites, then everybody who has the client ID and the certificate has read permissions to everything in the tenant, in the worst case to confidential data.
Regards,
Emmo