Application permissions

Shop Floor Production (BC) • Article • 11/6/2025 •

This page describes how to register an application in the Azure portal using application permissions. With application permissions, the application acts independently using its own identity, meaning work instructions are accessible to all shop floor users regardless of their individual SharePoint permissions.

If you want work instruction access to respect each user's SharePoint permissions, see Delegated permissions instead.

Prerequisites

For application permissions, you do not need to manually enter the SharePoint URL or document library name on the Shop Floor Production Setup page. Instead, the recommended approach is to run the Work Instruction Connection Setup wizard after completing the app registration, which automatically populates these fields. You must still enter the Client ID and Client Secret field values on the Shop Floor Production Setup page.

For application permissions, follow the same steps described in the App registration section to register the application in the Azure portal.

Configure API permissions

To configure the necessary API permissions, follow these steps:

On the menu bar, select API permissions.

Add Microsoft Graph permissions for sites

Select + Add a permission.
The Request API permissions page opens.
On the Request API permissions page, select Microsoft Graph > Application permissions.
In the Select permissions filter, enter Sites to view the list of permissions for sites.
Select the Sites.ReadWrite.All checkbox.
Select Add permissions.

Add Microsoft Graph permissions for user

Select + Add a permission.
Select Microsoft Graph > Application permissions.
In the Select permissions filter, enter User to view the list of permissions for user.
Select the User.Read.All checkbox.
Select Add permissions.

Add SharePoint permissions for all sites (Read)

Select + Add a permission.
The Request API permissions page opens.
On the Request API permissions page, select SharePoint > Application permissions.
In the Select permissions filter, enter Sites to view the list of permissions for all sites.
Select the Sites.Read.All checkbox.
Select Add permissions.

Add SharePoint permissions for all sites (Write)

Select + Add a permission.
Select SharePoint > Application permissions.
In the Select permissions filter, type Sites to view the list of permissions for all sites.
Select the Sites.ReadWrite.All checkbox.
Select Add permissions.

Once all the necessary permissions are added, your API permissions will be configured.

App registration is complete. Make sure to record the following two fields to proceed:

Client ID
Secret Value

Admin consent is required for the application registration to function correctly.

Next step

After completing the app registration, proceed to Set up SharePoint connection using assisted setup to run the wizard that connects Business Central to SharePoint.