Enterprise App API permissions

[dennisg]

Hi everybody,
We use PDF-Xchange and would like to access our sensitivity labels as defined in our Purview setup. When looking at the API Permissions requested by PDF-Xchange, a couple of them appear to be too much for us to grant them org-wide. Specifically:

image.png

Can we go ahead and Admin consent them all then go back and remove these rather broad permissions if we just want to use Purview?

thanks!
Dennis

[Paul - PDF-XChange]

Hi, dennisg

• Read and write access to your mail - that is required to send emails via outlook.com API,
• Read and write items in all site collections - that's for Sharepoint

All the rest is required by the MIP SDK

Unfortunately it is all or nothing here - one cannot for example deny the Email permission only.