Allowed Application Permissions
Usage Add a permission (e.g. 'Directory.Read.All') only if a custom app on this website must be able to request it. The permissions needed by the apps that WPO365 ships with - e.g. 'Sites.Read.All' are always regarded as allowed, so you do not need to add those yourself.
Default Empty
Plugins WPO365 | LOGIN