Azure Permissions - Getvisibility App

Azure AD

API / Permissions name	Type	Description	Admin consent required
Sites.Manage.All	Application	Create, edit, and delete items and lists in all site collections	Yes*
Sites.Read.All	Application	Read items in all site collections	Yes
InformationProtectionPolicy.Read.All	Application	Read all published labels and label policies for an organization.	Yes**

API / Permissions name	Type	Description	Admin consent required
UnifiedPolicy.Tenant.Read	Application	Read all unified policies of the tenant.	Yes**

* Permissions required to access remediations and tagging features

** Permission needed for reading MS AIP labels

API / Permissions name	Type	Description	Admin consent required
Directory.Read.All	Application	Read directory data	Yes
Sites.Manage.All	Application	Create, edit, and delete items and lists in all site collections	Yes*
Sites.Read.All	Application	Read items in all site collections	Yes
Files.Read.All	Application	Read files in all site collections	Yes
Files.ReadWrite.All	Application	Read and write files in all site collections	Yes*
User.Read.All	Application	Read all users' full profiles	Yes
InformationProtectionPolicy.Read.All	Application	Read all published labels and label policies for an organization.	Yes**

API / Permissions name	Type	Description	Admin consent required
UnifiedPolicy.Tenant.Read	Application	Read all unified policies of the tenant.	Yes**

* Permissions required to access remediations and tagging features

** Permission needed for reading MS AIP labels