AWS quick documentation change
Summary
Added 'Excel permissions' section detailing Microsoft Excel extension permissions and security capabilities
Security assessment
Documents security permissions (ReadWriteDocument access level), data handling capabilities ('can send data over the Internet'), and explicitly advises administrators to review permissions during deployment. Enhances security transparency but doesn't fix specific vulnerabilities.
Diff
diff --git a/quick/latest/userguide/excel-extension-preview.md b/quick/latest/userguide/excel-extension-preview.md index 139fdf199..643cd58ae 100644 --- a//quick/latest/userguide/excel-extension-preview.md +++ b//quick/latest/userguide/excel-extension-preview.md @@ -7 +7 @@ -Excel prerequisitesDeploy Excel extension +Excel prerequisitesDeploy Excel extensionExcel permissions @@ -50,0 +51,2 @@ The following procedures are for IT administrators who want to automatically dep + * Microsoft Excel extension permissions + @@ -89,0 +92,17 @@ Follow these steps to deploy the extension to your users: +## Microsoft Excel extension permissions + +The Amazon Quick Excel extension uses the `ReadWriteDocument` Office JavaScript API permission level. This is an Office add-in manifest permission, not a Microsoft Graph API scope. No Graph API permissions are needed during deployment. + +The default app capabilities for the Excel add-in are: + + * Can read and make changes to your document + + * Access your profile information such as your name, email address, company name, and preferred language + + * Can send data over the Internet + + + + +Administrators should review the permissions listed during the consent step of deployment through the M365 admin center integrated apps portal. +