A delegate user can authenticate a Sharepoint element instance by using the field "Use Scope" set as false. Also, if the delegate user has access to a new Sharepoint app, the new Sharepoint app must first have successfully API calls made by the administrator of the Azure Active Directory where the application was created. A single admin call “activates” the API for other users.
