API Permissions
| Permission | Description | How the extension uses it |
|---|---|---|
| webRequest | Observes authenticated requests made to supported Dynamics hosts | Captures the bearer token already being used by the signed-in user for read-only Dataverse metadata requests |
| webNavigation | Reads navigation and frame information for open tabs | Identifies the supported source-tab frame containing the page context required by the ERD workflow |
| storage | Access to extension-local session storage | Stores the captured token, expiry, environment mapping, and temporary tab context in chrome.storage.session |
| alarms | Schedules periodic extension maintenance | Removes expired bearer tokens and updates the extension status badge |
| tabs | Reads information about open browser tabs | Identifies the source tab, communicates with its content script, and opens the full ERD viewer |
Host Permissions
| Host | How the extension uses it |
|---|---|
| https://*.dynamics.com/* | Observes authenticated Dataverse requests, injects the local page bridge, and reads solution, table, column, and relationship metadata |
| https://make.powerautomate.com/environments/* | Detects the active Power Automate environment |
| https://make.powerapps.com/environments/* | Detects the active Power Apps environment |
| https://make.preview.powerapps.com/environments/* | Supports the Power Apps preview host |
| https://*.sharepoint.com/sites/* | Detects SharePoint Online site contexts, discovers visible custom lists, and reads fields and Lookup relationships |
| https://*.sharepoint.com/teams/* | Detects SharePoint Online site contexts, discovers visible custom lists, and reads fields and Lookup relationships |