When I create a provider hosted app for SharePoint 2013 with the August 2013 CU applied I receive the error "Sorry, only tenant administrators can add or give access to this app" when deploying to an on-premise server if the app requests User Profile Read permissions. This worked when running the March 2013 PU and the June 2013 CU. This effectively blocks the app installation when User Profile read permissions are requested as the Trust It button is disabled.
Can anyone verify whether this is a bug with the August 2013 CU for SharePoint 2013 and/or provide any workaround for this issue?
Software:
- Visual Studio 2012 with Microsoft Office Developer Tools
- SharePoint 2013 August 2013 CU (15.0.4535.1000) on premise
Steps to reproduce:
- Open Visual Studio 2013
- Select File > New Project
- Select ‘App for SharePoint 2013’ and click next
- Select provider hosted and click next and finish
- Open the AppManifest.xml file
- In the permissions tab select Scope: User Profile (Social), Permission: Read
- Click Start to deploy the project
- When the app permission page opens the message “Sorry, only tenant administrators can add or give access to this app” is displayed and the Trust It button is disabled. This prevents calls to the user profile service and any other calls to the app web from the remote web. This is occurring even when the user installing the app is a farm administrator, has full control on the user profile service application and is a site collection administrator. It worked on previous CU’s (March PU, June CU).
A similar error occurs when requesting permissions to the Search service.