How can I get permissions from SharePoint site using MS Graph

Question

How can I get permissions from SharePoint site using MS Graph

Adrian Corral Ruiz 20

I am looking to see how I can get a list of SharePoint sites and then, get their permissions using the Graph API. I know that it could be done with SP Rest API, but I'm more interested in Graph.

I tried to get the permissions of one of my sites in my dev tenant, but I'm getting an empty array. I'll explain what I configured:

Azure App Registration with Graph -> Sites.FullControl.All api permission granted with admin consent. I have a secret created too.
Then I made a POST request to get the Bearer token to get next steps
Later, I made a GET request to get a list of sites in my tenant and worked successfully
Finally, I'm trying requesting the permissions, but an empty array is returned:

I tried to put only the id, the entire id, and more combinations, but this output is the same.

Any help would be appreciated!

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

Xyza Xue_MSFT 30,336 Microsoft External Staff

Hi @Adrian Corral Ruiz ,

Thank you for posting in this community.

/sites/{sitesId}/permissions: Use this method to obtain application permissions; not site user permissions.

The default return value is an empty array, unless you have previously created permissions.

User's image

If you are trying to get Site Collection Permissions Report, there is no graph api for that, you can get it through powershell. If that's not your intention, forgive me for misunderstanding.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Adrian Corral Ruiz 20 Reputation points

2024-10-02T08:29:48.9966667+00:00

Hi @Xyza Xue_MSFT ,

Thanks a lot for the response!

I'm trying to make this step before asking for permissions, but the same result happens: I'm getting 200OK with an empty value...

My application was created in Azure, not in the specific site. Would be that the problem?

To get more context... What I would like to obtain is all the permissions of every site in the entire SharePoint in my tenant. We are currently getting this info using PowerShell, but it takes too much time site by site.

The idea is to make it using API to decrease the execution time (for example using GO instead of PowerShell).

Another time, thanks a lot and any help would be apreciated!
Xyza Xue_MSFT 30,336 Reputation points Microsoft External Staff

2024-10-07T07:00:36.3166667+00:00

This API can't get all the permissions for every site in the entire SharePoint in the tenant.

/sites/{sitesId}/permissions: Use this method to obtain application permissions; not site permissions.

created permissions: POST not GET
Adrian Corral Ruiz 20 Reputation points

2024-10-09T05:41:45.9533333+00:00

Thank you so much @Xyza Xue_MSFT !!

I thought that it was possible to obtain site permissions using graph, but the only thing I found is application permissions...

Do you know if there is a graph option to obtain site/library permissions using graph?

I know that using SharePoint RestAPI is possible, but just being curious whether is it possible.

Thank you another time!