SAP Knowledge Base Article - Preview

3759330 - SaaS Discovery Entra ID integration requires application.read.all permission

Symptom

  • During SaaS discovery setup, the integration requests the Microsoft Graph permission Application.Read.All.
  • Administrators decline granting Application.Read.All because it exposes both gallery and non-gallery applications.
  • A clarification is requested whether only gallery applications are needed and if a more granular permission can be used instead of Application.Read.All.


Read more...

Environment

  • Product: SAP LeanIX
  • LeanIX SaaS Discovery integration Entra ID

Keywords

leanix, saas discovery, microsoft entra, entra id, azure ad, application.read.all, graph api, gallery applications, non-gallery applications, permissions, oauth scopes, integration setup, least privilege, access control, configuration, authorization , KBA , LIX-INT-SAASDISCOV , LeanIX Integration saasdiscovery , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.