The Archive app was given too much? How to fix it
When Grant consent finds permissions beyond Sites.Selected
The Archive application asks for exactly one permission, Sites.Selected. Step 1 reads back what your directory actually granted, and stops when it finds more - usually because an approval page was accepted with extra permissions on it. ShareMaster never uses them, but a tenant-wide permission nobody intended should not stay. When you are done, press Back and then Grant consent again.
Reads only. Nothing in SharePoint is changed.
What it tells you
- Nothing has used the extra permissions. ShareMaster stops before anything relies on the application.
- Removing them takes a minute in the Entra admin centre, and needs a Global Administrator or Privileged Role Administrator.
How to fix it
- Open the application in Entra. Go to https://entra.microsoft.com and sign in as a Global Administrator of this tenant. Open Identity > Applications > Enterprise applications, and search for ShareMaster Archive.
- Review its permissions. Open Permissions (under Security). Under Admin consent you will see Sites.Selected for Microsoft Graph and for SharePoint, plus whatever else was granted.
- Remove everything except Sites.Selected. For each permission other than Sites.Selected, open the menu (...) beside it and choose Revoke permission. Leave both Sites.Selected entries.
- Come back and press Grant consent. Press Back to return to Configure tenant, then Grant consent. It reads the grants again and carries on when only Sites.Selected is left.
What you need
- A Global Administrator or Privileged Role Administrator in this tenant.
Read next
- Step 1: Grant consent: What the application is and why it needs so little.
- Back to contents: The other steps and how they fit together.