Step 5. Review Microsoft Entra Application Permissions

At the Application Permission Check step, you can review new permissions that must be granted to the Microsoft Entra application to back up and restore data of your Microsoft 365 organizations with modern app-only authentication.

You can update permissions of the Microsoft Entra application manually. For more information, see What You Do After Upgrade.

The following table lists new permissions:

Step 5. Review Microsoft Entra Application Permissions
API	Permission name	Type	Usage	Description
Microsoft Graph	User.Read.All	Application	Backup, restore	Accessing Exchange mailboxes that belong to a user (getting mailbox IDs).
	User.Read.All	Delegated	Restore	Accessing Exchange mailboxes that belong to a user (getting mailbox IDs).
	MailboxItem.ImportExport.All	Application	Backup, restore	Exporting Exchange mailbox item data and creating a session to import an Exchange mailbox item.
	MailboxItem.ImportExport	Delegated	Restore	Creating a session to import an Exchange mailbox item.
	MailboxItem.Read.All	Application	Backup, restore	Accessing Exchange mailbox items to do the following: Get mailbox item properties. Get mailbox items that were added, deleted, or updated in a mailbox folder.
	MailboxItem.Read	Delegated	Restore	Accessing Exchange mailbox items within a mailbox folder in a mailbox.
	MailboxFolder.ReadWrite.All	Application	Backup, restore	Accessing Exchange mailbox folders to do the following: Read properties and relationships of a mailbox folder. Get mailbox folder objects that were added, deleted, or removed from a user mailbox. Create a new mailbox folder or subfolder in a user mailbox.
	MailboxFolder.ReadWrite	Delegated	Restore	Creating a new mailbox folder or subfolder in a user mailbox.