Graph API - Unable to upload the content of file when the file is protected using Sensitivity label

Question

Graph API - Unable to upload the content of file when the file is protected using Sensitivity label

Sumugan Swaroop 1

I'm trying to replace content of a file using GraphAPI to sharepoint. The file present on the sharepoint site has been encrypted by a protected sensitivity label. I've the following permissions granted for the access token.

Directory.ReadAll
Content.DelegatedReader
Content.DelegatedWriter
Content.Writer
user impersonation
Directory.ReadAll
Files.ReadWrite.All
Group.Read.All
Sites.ReadWrite.All
User.Read.All
UnifiedPolicy.Tenant.Read
UnifiedPolicy.User.Read
ActivityFeed.Read
Sites.ReadWrite.All
TermStore.ReadWrite.All
User.ReadWite.All

I'm getting the following error from the API.

{\"error\":{\"code\":\"notAllowed\",\"message\":\"This operation has been disabled by policy\",\"innerError\":{\"date\":\"2022-12-20T11:06:48\",\"request-id\":\"ce194de5-60b6-43a5-8289-85706622cfe1\",\"client-request-id\":\"ce194de5-60b6-43a5-8289-85706622cfe1\"}}}

Is there a way in Graph API to replace content for an encrypted file?

Tong Zhang_MSFT 9,251 Reputation points

2022-12-21T01:25:46.757+00:00

Hi @Sumugan Swaroop ,

We are currently doing some research on this issue, will let you know as soon as possible.

2 answers

Your answer

Tong Zhang_MSFT 9,251 Reputation points

2022-12-21T01:25:46.757+00:00

Hi @Sumugan Swaroop ,

We are currently doing some research on this issue, will let you know as soon as possible.

Answer 1

Tong Zhang_MSFT 9,251

Hi @Sumugan Swaroop ,

According to my research and testing, I can successfully use the following Graph API to replace file content when using sensitivity label:

PUT /sites/{site-id}/drive/items/{item-id}/content

Please try again using the Graph API above. In addition, are you using Graph Explorer? If yes, try to perform this request in Postman.

My test result:

Hope it can help you. Thanks for your understanding.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Sumugan Swaroop 1 Reputation point

2022-12-21T18:01:31.633+00:00

@Tong Zhang_MSFT , thanks for the reply. I'm using the same API on Postman as mentioned by you. But when I do so, I'm getting the error mentioned earlier:

{\"error\":{\"code\":\"notAllowed\",\"message\":\"This operation has been disabled by policy\",\"innerError\":{\"date\":\"2022-12-20T11:06:48\",\"request-id\":\"ce194de5-60b6-43a5-8289-85706622cfe1\",\"client-request-id\":\"ce194de5-60b6-43a5-8289-85706622cfe1\"}}}

Just to clarify, the file that I'm trying to replace content, is classified using a protected sensitivity label. Is the file that you're trying to replace the content, also protected?
Tong Zhang_MSFT 9,251 Reputation points

2022-12-27T06:34:37.773+00:00

Hi @Sumugan Swaroop ,

Yes, in my test, this file also used sensitivity label. To help you better, please try to a troubleshooting, check if the same issue occurs when you use other files (files that don't contain sensitivity labels).
Sumugan Swaroop 1 Reputation point

2022-12-27T06:58:43.48+00:00

For other files(files that don't contain sensitivity labels and files that have a normal sensitivity label), I am able to replace the content. It's only for the files with a protected sensitivity label, I'm seeing this error.
Tong Zhang_MSFT 9,251 Reputation points

2022-12-27T07:28:52.473+00:00

Hi @Sumugan Swaroop ,

Based on my research, unfortunately we cannot replace the file content of protected sensitivity labels using the Graph API. As you said, we can only replace file content that does not contain sensitivity labels or files that have normal sensitivity labels. Thanks for your understanding.

Also, I suggest you can create a feedback on this issue. Many features of our current products are designed and upgraded based on customers’ feedback. With requirements like this increase, the problem may well be released in the future. Thanks for your understanding and support.

Feedback:
https://feedbackportal.microsoft.com/feedback/forum/ebe2edae-97d1-ec11-a7b5-0022481f3c80
Sumugan Swaroop 1 Reputation point

2022-12-27T08:40:30.627+00:00

Thanks @Tong Zhang_MSFT . I've submitted a feedback as per your suggestion. Hope to see this supported by Graph API soon.

https://feedbackportal.microsoft.com/feedback/idea/366eac68-c185-ed11-a81b-6045bdaf6a9e
Tong Zhang_MSFT 9,251 Reputation points

2022-12-28T01:55:02.23+00:00

Hi @Sumugan Swaroop ,

Thank you for your reply, I have voted for your feedback and look forward to any updates.

Thank you for your understanding and support.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Westley Hall 6 Microsoft Employee

This may only affect the upload when the sensitivity label encrypts the file. In this case you may need to remove the label/decrypt and then upload and apply it/encrypt again.

Share via

Graph API - Unable to upload the content of file when the file is protected using Sensitivity label

2 answers

Your answer