Created by Claude - please verify

SPFx - tenant app catalog, approved and pending API permissions of 'SharePoint Online Web Client Extensibility' (PnP).

Required Microsoft Graph permissions

SharePoint: Sites.FullControl.All (certificate PnP) — application permission, granted to the app registration with admin consent.

Licence: None.

Endpoints: Get-PnPApp -Scope Tenant · Get-PnPTenantServicePrincipalPermissionGrants · Get-PnPTenantServicePrincipalPermissionRequests · Get-PnPSiteCollectionAppCatalog

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

SPFx Solutions & Tenant-wide API Permissions

When an admin approves an API permission requested by an SPFx solution, it is granted to the shared 'SharePoint Online Web Client Extensibility' app - so every SPFx solution in the tenant can use it on behalf of every user. This report lists those permissions, pending requests and the solutions deployed from the tenant app catalog.