# Elevate App Privileges to Access Advanced Features (Old Version)

This article is deprecated because Microsoft has retired the Add-In model. Check [this article](https://www.nutrient.io/guides/document-converter/sharepoint/knowledge-base/how-to-elevate-app-privileges-to-access-advanced-features.md) on how to elevate the new Document Converter Online SPFx App.

Some of the features provided by the [Muhimbi Document Converter for SharePoint Online](https://www.nutrient.io/) require a level of privileges slightly higher than what out-of-the-box SharePoint App Store apps are allowed to have. Rather than bypassing the App Store completely, making deployment more difficult, we provide the option to elevate the App Permissions manually, but only when certain functionality is needed.

At the time of writing the only functionality that require elevated privileges are the following:

- [Real-time watermarking](/guides/document-converter/sharepoint/knowledge-base/watermark-secure-onopen-in-sharepoint-online-faq.md).

- Hiding the UI integration (For sites that only want to expose Muhimbi's workflow facilities)

- Enabling Ribbon buttons (For sites where the App has been deployed via the App Catalog)

- Creating files using the correct user name when using SharePoint Designer Workflows (Otherwise _Created_ and _Updated_ _By_ fields will use the 'SharePoint App' name. This doesn't require an App Feature to be enabled, just elevate the App)

- [Converting web pages](https://www.nutrient.io/blog/converting-sharepoint-online-pages-items-to-pdf/) (via the User Actions menu)

**If you do not require any of this functionality then there is no reason to carry out the steps below.**

Below you will find instructions to elevate the App centrally for all site collections, which requires the involvement of a SharePoint Tenant Administrator, as well as instructions for elevating the privileges of the App on one site collection at a time, which requires the involvement the Site Collection's Administrator.

## Centrally elevate the App on all site collections

For larger deployments, where the Muhimbi App needs to be elevated on multiple site collections, it is easiest to carry out the elevation process centrally.

**Prerequisites**

Before starting the central elevation process, please make sure the following prerequisites are in place:

1. The user carrying out these steps must be a Tenant Administrator.

2. The Document Converter for SharePoint Online App has been installed in at least one Site Collection [as per these instructions](/guides/document-converter/sharepoint/knowledge-base/installing-the-pdf-converter-for-sharepoint-online-app.md).

3. For sites that have been created as 'Modern Sites', custom scripts are disabled by default. Please enable it [as per this Microsoft Article](https://support.office.com/en-us/article/allow-or-prevent-custom-script-1f2c515f-5d7e-448a-9fd7-835da935584f%20).

**Elevating privileges**

If you experience any issues while carrying out these elevation steps, then please check out the _Troubleshooting_ section at the end of this article.

To begin the elevation process, navigate to the SharePoint Admin Center ([your tenant]-admin.sharepoint.com), and add&nbsp;*/\_layouts/15/appinv.aspx* to the end of the URL to access the 'elevation screen'&nbsp;*.*&nbsp;Please remember to use YOUR tenant's URL, but in our example&nbsp;it is&nbsp;*acme-admin.sharepoint.com/\_layouts/15/appinv.aspx.*

Once opened, fill out the screen as follows:

1. In the _App Id_ field enter **80645d3a-62a3-4ce3-a224-ce22188d619c**&nbsp;and click 'Lookup'.

2. **Do not change any of the fields**, only paste the following XML in the 'Permission Request XML' field.

```xml

<AppPermissionRequests AllowAppOnlyPolicy="true">
 <AppPermissionRequest Scope="http://sharepoint/content/tenant" Right="FullControl" />
 <AppPermissionRequest Scope="http://sharepoint/social/tenant" Right="Read" />
</AppPermissionRequests>

```

**The screen should look as follows ( _ignore the actual XML, it has changed since the screenshot was made_):**![Elevate_Privileges.png](@/assets/guides/muhimbi/how-to-elevate-app-privileges-to-access-advanced-features/elevate-privileges.png)

Click the 'Create' button to continue to the following screen (it may look slightly different depending on the level at which elevation is carried out):![Elevate_Privileges_-_Trust.png](@/assets/guides/muhimbi/how-to-elevate-app-privileges-to-access-advanced-features/elevate-privileges-trust.png)

Click 'Trust it' to activate the App's new privileges across the entire tenant.

## Elevate the App on a single site collection

For situations where the Muhimbi App only needs to be elevated on a single, or very small number of site collections, or when the SharePoint Tenant Administrator is unavailable, it may be easier to carry out elevation on one site collection at a time.

[A video of the process described below is available here](https://www.nutrient.io/resources/tutorial-configure-real-time-watermarking-in-sharepoint-online). That video shows the various steps at quite a rapid pace, so please take your time to read the instructions listed below.

**Prerequisites**

Before starting the elevation process, please make sure the following prerequisites are in place:

1. The user carrying out these steps must be a Tenant Administrator for the first (optional) elevation instructions. To elevate the Site Collection (2nd part of instructions below), the user will need to be a Site Collection Administrator.

2. The Document Converter for SharePoint Online App has already been installed in the Site Collection [as per these instructions](/guides/document-converter/sharepoint/knowledge-base/installing-the-pdf-converter-for-sharepoint-online-app.md).

3. The steps described below must be carried out in the root web of the site collection.

4. As the elevated permissions (at the site collection level) are reset when the App is installed on a sub-site, we recommend installing the App on all (sub) sites before starting the elevation process.

5. For sites that have been created as 'Modern Sites', custom scripts are disabled by default. Please enable it [as per this Microsoft Article](https://support.office.com/en-us/article/allow-or-prevent-custom-script-1f2c515f-5d7e-448a-9fd7-835da935584f%20).

**Elevating privileges**

If you experience any issues while carrying out these elevation steps, then please check out the _Troubleshooting_ section at the end of this article.

Privileges must be elevated separately for each site collection. To allow user specific regional settings and time zone information to be taken into account when applying watermarks, it is also recommended to carry out elevation at the Tenant level. This is optional and requires Tenant Administration privileges. If you only have Site Collection Administrator privileges then please skip to the ' _Repeat elevation at the Site Collection Level_' section.

To begin the elevation process, navigate to the SharePoint Admin Center ([your tenant]-admin.sharepoint.com) Add&nbsp;*/\_layouts/15/appinv.aspx* to the end of the URL to access the 'elevation screen'&nbsp;*.*&nbsp;Please remember to use YOUR tenant's URL, but in our example&nbsp;it is&nbsp;*acme-admin.sharepoint.com/\_layouts/15/appinv.aspx.*

Once opened, fill out the screen as follows:

1. In the _App Id_ field enter **80645d3a-62a3-4ce3-a224-ce22188d619c**&nbsp;and click 'Lookup'.

2. **Do not change any of the fields**, only paste the following XML in the 'Permission Request XML' field.

```xml

<AppPermissionRequests AllowAppOnlyPolicy="true">
 <AppPermissionRequest Scope="http://sharepoint/social/tenant" Right="Read" />
</AppPermissionRequests>

```

**The screen should look as follows ( _ignore the actual XML, it has changed since the screenshot was made_):**![Elevate_Privileges.png](@/assets/guides/muhimbi/how-to-elevate-app-privileges-to-access-advanced-features/elevate-privileges.png)

Click the 'Create' button to continue to the following screen (it may look slightly different depending on the level at which elevation is carried out):![Elevate_Privileges_-_Trust.png](@/assets/guides/muhimbi/how-to-elevate-app-privileges-to-access-advanced-features/elevate-privileges-trust.png)

Click 'Trust it' to activate the new privileges.

**Repeat elevation at the Site Collection Level.**

1. Navigate to the Site Collection and add */\_layouts/15/appinv.aspx*&nbsp;to the URL (e.g. [your tenant].sharepoint.com/sites/somesite/_layouts/15/appinv.aspx)

2. In the&nbsp;*App Id*&nbsp;field enter&nbsp;**80645d3a-62a3-4ce3-a224-ce22188d619c**&nbsp;and click 'Lookup'.

3. **Do not change any of the fields**, only paste the following XML in the 'Permission Request XML' field.

```xml

<AppPermissionRequests AllowAppOnlyPolicy="true">
 <AppPermissionRequest Scope="http://sharepoint/content/sitecollection" Right="FullControl" />
</AppPermissionRequests>

```

Click the 'Create' button to continue, followed by 'Trust it' to activate the new privileges.

## Enabling Advanced Features

Muhimbi's SharePoint Online software uses the concept of 'App Features' to toggle advanced functionality. Enabling these features is similar to SharePoint's own _Site Collection_ and _Site_ Features, however the screen is accessed differently.

The user carrying out the App Feature activations, after the elevation process has completed, must be a 'known-user'. In other words, logged in using the account used to register the trial, or one of the accounts provided when the subscription was purchased. If the menu links are not displayed on the left hand side of the Document Converter's SharePoint screens then please [contact our support desk.](https://www.nutrient.io/company/contact)

Access the App Features screen as follows:

1. Navigate to 'Site Contents'.

2. Click on _Muhimbi Document Converter for SharePoint Online_.

3. The _Product Information_ page for this product is now displayed. Providing you are registered as a _known user_ you will see a 'Features' option on the left hand-side of the screen. If this option is not displayed then please see the _Troubleshooting_ section at the end of this article.

4. Click the _Features_ Link, which displays the following screen. Click _Activate_ to elevate the relevant Feature.![App_Features.png](@/assets/guides/muhimbi/how-to-elevate-app-privileges-to-access-advanced-features/app-features.png)

If the following screen is displayed instead, then the App has not been properly elevated. In that case please double check the steps provided above.![Not_elevated.png](@/assets/guides/muhimbi/how-to-elevate-app-privileges-to-access-advanced-features/not-elevated.png)

## Questions / troubleshooting

1. **The&nbsp;*Features* link is not displayed:**&nbsp;If you don't see this option then please contact the person looking after your Muhimbi Subscription, or email our&nbsp;[support desk](https://www.nutrient.io/company/contact).

2. **User is not allowed to open the&nbsp;*appinv.aspx* screen:** For elevations carried out via the SharePoint Admin Center, the user will need to be a Tenant Administrator. For elevations carried out at the individual site collection level, the user must be a Site Collection Administrator.

3. **After elevation it tells me I still need to elevate:** Please make sure the default option of 'allow users to run custom scripts' is enabled on the site collection being elevated. For details see [this 3rd party blog post](https://clavinfernandes.wordpress.com/2018/07/17/elevate-apps-privileges-does-not-work-in-sharepoint-online/).

4. **Does the elevation process need to be carried out on other site collections?** This process needs to either be carried out centrally (first set of instructions above) or repeated for each Site Collection that requires the relevant App Feature (when using the second set of instructions listed above).

5. **Does the elevation process need to be carried out on sub-sites?** No, elevation MUST be carried out either centrally or on the root site collection.

6. **Does the App need to be re-elevated after reinstalling?**&nbsp;If you ran the App elevated before it was reinstalled then it is recommended to re-elevate to ensure it works exactly the same as before.

7. **Special steps when uninstalling:** When uninstalling the Muhimbi Document Converter App it is recommended to de-activate the App Feature before carrying out the uninstallation. **Doing so an absolute requirement when uninstalling using SharePoint's App Catalog, otherwise it will no longer be possible to access PDF files.** This is due to limitations in the App Catalog model. Also, please make sure that the App is still elevated (as described above) when uninstalling the App.

---

## Related pages

- [Understanding file check-in and checkout in SharePoint](/guides/document-converter/sharepoint/knowledge-base/are-files-checked-in-out-after-conversion.md)
- [How to resolve the issue of Blink binaries (Portable Chromium) no longer being included?](/guides/document-converter/sharepoint/knowledge-base/alternative-options-to-portable-chromium.md)
- [Streamline document conversion in SharePoint](/guides/document-converter/sharepoint/knowledge-base/automatic-document-conversion-workflow-getting-started.md)
- [Converting InfoPath/Nintex form-based list items using Nutrient Document Converter](/guides/document-converter/sharepoint/knowledge-base/converting-infopath-nintex-forms-based-list-items-using-the-muhimbi-pdf-converter.md)
- [Configuring Chromium-based HTML-to-Document converter](/guides/document-converter/sharepoint/knowledge-base/configuring-chromium-based-html-to-pdf-converter.md)
- [Understanding automatic check-in for SharePoint Online](/guides/document-converter/sharepoint/knowledge-base/automatic-check-in-behaviour-in-sharepoint-online.md)
- [How to avoid Microsoft Office as a dependency?](/guides/document-converter/sharepoint/knowledge-base/avoiding-microsoft-office-as-dependency.md)
- [Effortlessly convert SharePoint list items to PDF](/guides/document-converter/sharepoint/knowledge-base/convert-a-list-item-including-all-attachments-to-pdf.md)
- [Effortless document workflows with SharePoint Designer](/guides/document-converter/sharepoint/knowledge-base/creating-workflows-using-sharepoint-designer-the-muhimbi-pdf-converter.md)
- [What do I get if I subscribe to Document Converter Online?](/guides/document-converter/sharepoint/knowledge-base/difference-between-sharepoint-app-and-power-automate-features.md)
- [How to enable custom scripts in SharePoint Online](/guides/document-converter/sharepoint/knowledge-base/enable-custom-scripts-in-sharepoint-online.md)
- [How to harden and secure the server running the Conversion Service?](/guides/document-converter/sharepoint/knowledge-base/hardening-securing-the-server-that-runs-the-conversion-service.md)
- [How to specify which InfoPath view(s) to convert?](/guides/document-converter/sharepoint/knowledge-base/how-can-i-specify-which-infopath-view-s-to-convert.md)
- [Deploying real-time watermarking in SharePoint](/guides/document-converter/sharepoint/knowledge-base/enabling-real-time-watermarking-on-modern-view-libraries.md)
- [How can I request a trial license?](/guides/document-converter/sharepoint/knowledge-base/how-can-i-request-a-trial-license.md)
- [Find your SharePoint Online Tenancy ID in minutes](/guides/document-converter/sharepoint/knowledge-base/how-to-determine-your-sharepoint-online-tenancy-id.md)
- [Optimize Nintex workflows with document conversion](/guides/document-converter/sharepoint/knowledge-base/how-can-i-use-the-pdf-converter-in-combination-with-nintex-workflow.md)
- [Secure document processing for SharePoint Online](/guides/document-converter/sharepoint/knowledge-base/how-does-the-pdf-converter-for-sharepoint-online-deal-with-private-documents.md)
- [How to edit the Conversion Service configuration file?](/guides/document-converter/sharepoint/knowledge-base/how-to-edit-the-conversion-service-s-configuration-file.md)
- [How does Document Converter handle InfoPath XSN files?](/guides/document-converter/sharepoint/knowledge-base/how-does-the-pdf-converter-deal-with-infopath-xsn-files.md)
- [How to resolve the issue of iFrame, Embed, and Object entities being automatically removed?](/guides/document-converter/sharepoint/knowledge-base/iframe-embed-object-entities-are-removed.md)
- [Unlock advanced features in SharePoint Document Converter](/guides/document-converter/sharepoint/knowledge-base/how-to-elevate-app-privileges-to-access-advanced-features.md)
- [How well does Document Converter scale and handle high load?](/guides/document-converter/sharepoint/knowledge-base/how-well-does-the-pdf-converter-scale-deal-with-high-load.md)
- [How to install and configure Ghostscript for PDF post-processing](/guides/document-converter/sharepoint/knowledge-base/installing-and-configuring-ghostscript-for-pdf-post-processing.md)
- [Install Document Converter for SharePoint](/guides/document-converter/sharepoint/knowledge-base/installing-the-pdf-converter-for-sharepoint-online-app.md)
- [How can I use the GdPicture Conversion Engine globally?](/guides/document-converter/sharepoint/knowledge-base/how-to-use-gdpicture-conversion-engine-globally.md)
- [Deploying Muhimbi Document Converter in SharePoint 2013](/guides/document-converter/sharepoint/knowledge-base/installing-wsp-in-sharepoint-2013-running-2010-legacy-mode.md)
- [Knowledge Base: SharePoint Document Converter](/guides/document-converter/sharepoint/knowledge-base.md)
- [Optimize PDFs with advanced OCR features](/guides/document-converter/sharepoint/knowledge-base/ocr-facilities-provided-by-the-pdf-converter.md)
- [FAQs on SharePoint Online Document Converter](/guides/document-converter/sharepoint/knowledge-base/pdf-converter-for-sharepoint-online-faq.md)
- [Office 2019 Compatibility with Muhimbi Document Converter](/guides/document-converter/sharepoint/knowledge-base/office-2019-compatibility-with-pdf-converter.md)
- [or](/guides/document-converter/sharepoint/knowledge-base/print-quality-configuration.md)
- [Set up document converter for SharePoint workflows](/guides/document-converter/sharepoint/knowledge-base/installing-the-pdf-converter-for-sharepoint-online-workflow-actions.md)
- [Effortlessly deploy SharePoint Online apps and extensions](/guides/document-converter/sharepoint/knowledge-base/programmatically-deploy-the-sharepoint-online-app-spfx-extension-and-workflow-actions-to-multiple-site-collections.md)
- [Document Converter in SharePoint Subscription Edition and the stsadm command](/guides/document-converter/sharepoint/knowledge-base/pdf-converter-in-sharepoint-subscription-edition-and-the-stsadm-command.md)
- [Using the Document Converter from PowerShell](/guides/document-converter/sharepoint/knowledge-base/using-the-pdf-converter-from-powershell.md)
- [How to set GdPicture OCR as the default OCR engine?](/guides/document-converter/sharepoint/knowledge-base/set-up-gdpictureocr-as-default-ocr-engine.md)
- [Streamline PDF conversions in SharePoint Online](/guides/document-converter/sharepoint/knowledge-base/using-the-pdf-converter-for-sharepoint-online-user-interface.md)
- [Upgrade to Muhimbi Document Converter for SharePoint](/guides/document-converter/sharepoint/knowledge-base/upgrading-to-pdf-converter-for-sharepoint-online-spfx.md)
- [Optimize PDF viewer preferences effectively](/guides/document-converter/sharepoint/knowledge-base/setting-pdf-viewer-preferences-using-the-web-service.md)
- [Optimize PDFs: Fast Web Views and font management](/guides/document-converter/sharepoint/knowledge-base/set-pdf-version-enable-fast-web-views-embed-strip-fonts-using-web-services.md)
- [Optimize SharePoint with K2 Workflow Document Converter](/guides/document-converter/sharepoint/knowledge-base/using-pdf-converter-in-combination-with-k2-workflows.md)
- [Effortless PDF merging with SharePoint tools](/guides/document-converter/sharepoint/knowledge-base/what-pdf-merging-facilities-are-available.md)
- [Convert SharePoint Online pages to PDF easily](/guides/document-converter/sharepoint/knowledge-base/sharepoint-online-html-conversion-user-credentials.md)
- [What features have been added to Document Converter over the years?](/guides/document-converter/sharepoint/knowledge-base/what-features-have-been-added-to-the-pdf-converter-over-the-years.md)
- [Convert various file formats to PDF easily](/guides/document-converter/sharepoint/knowledge-base/what-file-formats-types-are-supported-for-conversion.md)
- [Where can I download the latest version of the software?](/guides/document-converter/sharepoint/knowledge-base/where-can-i-download-the-latest-version-of-the-software.md)
- [Where to find details about Document Converter's object model?](/guides/document-converter/sharepoint/knowledge-base/where-can-i-find-details-about-the-pdf-converter-s-object-model.md)
- [Watermark and secure OnOpen in SharePoint Online FAQ](/guides/document-converter/sharepoint/knowledge-base/watermark-secure-onopen-in-sharepoint-online-faq.md)
- [Convert documents with SharePoint PDF converter](/guides/document-converter/sharepoint/knowledge-base/what-locations-can-i-convert-documents-to.md)

