Skanska have multiple ShareGate Desktop seats. We have evaluated the ShareGate Apricot and we like it. It requires high privileges. Would it possible to have Delegated Permissions only? It is okay to only read data. We have very strict security rules and a tenant used across business units and countries. Application Permissions such as sending emails as users and Read and Write to all Site Collections, will not be allowed.
We already use o365-cli and our own app registration, as described here: https://developer.microsoft.com/en-us/office/blogs/using-your-own-azure-ad-identity-with-office365-cli/.
What we would like to do is having a similar setup or an ability to only have Delegated Permissions. I know, it means limitations, but we are sure we can take advantage of the ShareGate Apricot even with less privileges.