Remove "Site.FullControl.All" from my Azure App registration, still allow us to access all sites.

john john Pter 340 Reputation points
2024-09-17T14:34:56.9466667+00:00

I have an Azure App registration, which has 2 permission for SharePoint, as follow:-

  1. Sites.Selected
  2. Sites.FullControl.All

User's image

now i removed the "Sites.FullControl.All" >> but still using the ClientID & the Thumbprint related to this Azure App registration i can access all the sites and view all lists and manage them..

connect-PnPOnline -Url $siteUrl -ClientId $clientId -Thumbprint $certThumbprint -Tenant $tenant

Get-PnPList

so why removing the "Sites/FullControl.All" did not take effect? i did this 1 hour ago.

Thanks

SharePoint
SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
10,827 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,114 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ling Zhou_MSFT 18,100 Reputation points Microsoft Vendor
    2024-09-20T09:15:28.11+00:00

    Hi @john john Pter ,

    Thank you for posting in this community.

    According to the description of your question, it is true that you should no longer be able to access the site when the clearance is removed, but unfortunately I did not find an answer to this question.

    However, I recommend that you remove all permissions and re-add the permissions you kept. Finally, remove the other previous retention permissions. Then see if the problem persists.

    1.Delete all permission.

    image

    2.Add permissions which you kept.

    image

    image

    image

    3.Under Configured permissions click on Grant admin consent for -organization name.

    image

    In the panel on the right, select No, remove other granted permissions and click on Grant admin consent at the bottom. In the confirmation dialog that appears, click Yes.

    image

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.