diff --git a/connectors/microsoft-365/sharepoint.mdx b/connectors/microsoft-365/sharepoint.mdx
index 4a1b59e..47b0b76 100644
--- a/connectors/microsoft-365/sharepoint.mdx
+++ b/connectors/microsoft-365/sharepoint.mdx
@@ -117,6 +117,12 @@ Copy the "Application (client) ID" NOT the "Object ID". These are different valu
   - `Sites.FullControl.All`
 - Click **Add permissions**
 
+<Note>
+  **Permission Requirements:**
+  * `Sites.FullControl.All` is strictly required by the SharePoint API to fetch granular site group permissions.
+  * `Files.ReadWrite.All` is required by the Microsoft Graph API to establish and renew webhook subscriptions for document libraries. If you don't plan on using webhooks, you can use `Files.Read.All` instead.
+</Note>
+
 ### Step 4: Grant Admin Consent
 
 - On the API permissions page, click **"Grant admin consent for [Your Organization]"**