Help request for authenticating within enterprise tenant

[Loyola-London]

I teach at a university and use teams classrooms for my classes. I've used this library to interact with student files to add functionality to my teams site and to make my teaching/grading life easier. Microsoft's switch away from user/pass credentials effectively killed the tools I had built. Because I am not a sharepoint administrator, I can't (I don't think) create my own certificates to authenticate my scripts. So, I've been trying to work with our IT group to get something set up, but I'm running into roadblocks because I don't know what the engineers need to do and the engineers don't understand what I need. They are telling me there is no way to limit my certificate permissions to the sharepoints I own (see: https://github.com/vgrem/office365-rest-python-client/wiki/How-to-connect-to-SharePoint-Online-with-certificate-credentials#grant-permissions) which is a nonstarter for them (understandably).

Can anyone help me understand the best way to communicate my needs and/or address their concerns (if possible)? As a sharepoint user who does not have administrative rights, what's the right way to go about configuring access?

[ch-fuldry]

Hello,
The microsoft documentation is pretty bad about app authentication and really obscure. While researching something similar the best explanation I was able to locate is there :
https://cdn.avepoint.com/assets/webhelp/avepoint-online-services/index.htm#!Documents/specifyselectedsitesviagraphexplorer.htm
Remember that Teams is a sharepoint site, and unless you try to reach specific Teams objects (that is anything but the document library) it will make things even more complicated.
At least this guide will show you how it is done for sharepoint, and combined with the new Graph permissions (& documentation) you should manage to achieve what you want to do