SharePoint: Sites.FullControl.All (certificate PnP)
— application permission, granted to the app registration with admin consent.
Licence: None.
Endpoints:
Get-PnPTenant · Get-PnPTenantSite · Get-PnPSiteVersionPolicy (per site) · Get-PnPList (per site)
Microsoft's exact per-site version storage report (New-SPOSiteFileVersionExpireReportJob) writes a CSV into a library asynchronously; this scan shows the policies that drive the storage instead.
If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.
SharePoint Version-history Storage
Every file save keeps a version. With a high or unlimited version limit and no expiry, old versions can consume a large share of a site's storage - and extra SharePoint storage is bought per GB. This scan shows the tenant policy and the largest sites' libraries that keep many versions.
Press Run scan to read the version settings of the 100 largest sites.