The Virto Alerts application requires both Delegated and Application permissions.
Delegated Permissions
Delegated permissions are used to authorize users and manage frontend functionalities such as alerts.
Application Permissions
Application permissions are used for background services. Specifically, they are required for:
- Handling List Changes and Generating Emails: This involves reading users, groups, and SharePoint list items based on alert configurations.
- Updating List Webhook Subscriptions: To receive notifications of list changes, the application requires permissions similar to “List.Manage.” However, since this specific permission is not available via the API, “Sites.Manage.All” is requested instead.