Request for detail documentation of List permissions of a drive item

Ankur Gupta 20

https://learn.microsoft.com/en-us/graph/api/driveitem-list-permissions?view=graph-rest-1.0&tabs=http#http-request

My goal is to find out if calling user have write or read permission on an item using drive-id and item-id.

Thanks

1 answer

CarlZhao-MSFT 39,906

Hi @Ankur Gupta

Call the GET /drives/{drive-id}/items/{item-id}/permissions endpoint directly with your calling user, then check the returned JSON response, if the roles property contains write/read, then check the grantedToV2 property to see if it contains the current calling user.

{
  "value": [
    {
      "id": "permission-id",
      "roles": ["read"],
      "grantedToV2": {
        "user": {
          "id": "user-id",
          "displayName": "User Name"
        }
      }
    },
    {
      "id": "permission-id",
      "roles": ["write"],
      "grantedToV2": {
        "user": {
          "id": "user-id",
          "displayName": "User Name"
        }
      }
    }
  ]
}

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.

Ankur Gupta 20 Reputation points

2024-07-18T09:57:36.9266667+00:00
Thanks for your response.

However, the problem is that I am getting an empty list in 'value' for a folder that is read-only for me. What does that mean?

Here are the steps I followed to access that folder:

I am a member of a site.

Site owner created a folder.

Then, Site owner changed the permission to 'Can view' for the site members.

Then I executed the **GET /drives/{drive-id}/items/{item-id}/permissions **api.

I got this: https://graph.microsoft.com/v1.0/me/drives/{drive-id}/items/{item-id}/permissions { "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#users('{user-id}')/drives({drive-id}')/items('{item-id}')/permissions", "value": [] }

Ankur Gupta 20

I have one more question. I am the owner of a site and have created a folder there. I received the following response. How can I determine if this folder is write or read-only for me?
Thanks in advance.

{
  "@odata.context": "https://graph.microsoft.com/v1.0/$metadata#users('{user-id}')/drives('{drive-id}')/items('{item-id}')/permissions",
  "value": [
    {
      "id": "{shared-id}",
      "roles": [
        "owner"
      ],
      "shareId": "{share-id}",
      "grantedToV2": {
        "siteGroup": {
          "displayName": "DevTestSite Owners",
          "id": "4",
          "loginName": "DevTestSite Owners"
        }
      },
      "grantedTo": {
        "user": {
          "displayName": "DevTestSite Owners"
        }
      },
      "inheritedFrom": {}
    },
    {
      "id": "{shared-id}",
      "roles": [
        "read"
      ],
      "shareId": "{share-id}",
      "grantedToV2": {
        "siteGroup": {
          "displayName": "DevTestSite Visitors",
          "id": "5",
          "loginName": "DevTestSite Visitors"
        }
      },
      "grantedTo": {
        "user": {
          "displayName": "DevTestSite Visitors"
        }
      },
      "inheritedFrom": {}
    },
    {
      "id": "{share-id}",
      "roles": [
        "write"
      ],
      "shareId": "{share-id}",
      "grantedToV2": {
        "siteGroup": {
          "displayName": "DevTestSite Members",
          "id": "6",
          "loginName": "DevTestSite Members"
        }
      },
      "grantedTo": {
        "user": {
          "displayName": "DevTestSite Members"
        }
      },
      "inheritedFrom": {}
    },
    {
      "id": "{shared-id}",
      "roles": [
        "owner"
      ],
      "shareId": "{shared-id}",
      "grantedToV2": {
        "group": {
          "@odata.type": "#microsoft.graph.sharePointIdentity",
          "displayName": "DevTestSite Owners",
          "email": "DevTestSite@{domain}.onmicrosoft.com",
          "id": "0dba5735-eb31-42dd-9a7e-cb9e16f1134b"
        },
        "siteUser": {
          "displayName": "DevTestSite Owners",
          "email": "DevTestSite@{domain}.onmicrosoft.com",
          "id": "7",
          "loginName": "c:0o.c|federateddirectoryclaimprovider|0dba5735-eb31-42dd-9a7e-cb9e16f1134b_o"
        }
      },
      "grantedTo": {
        "user": {
          "displayName": "DevTestSite Owners",
          "email": "DevTestSite@{domain}.onmicrosoft.com",
          "id": "0dba5735-eb31-42dd-9a7e-cb9e16f1134b"
        }
      },
      "inheritedFrom": {}
    }
  ]
}

Share via

Request for detail documentation of List permissions of a drive item

1 answer