Create site permission -graph api throws "Access Denied"

Question

Hi, I have registered an Azure app and I want to use Microsoft Graph API to allow app to connect to SharePoint site collection and read / write files in specific location. I have granted the Site.Selected, as we want to restrict the access of this app only to this site. The issue is when I try to create permission for the site in Graph explorer returns "Access denied". POST /sites/{sitesId}/permissions

Answer 1

Hi Nick,

Thanks for reaching out!

As per the documentation to create site permission "Sites.FullControl" permission is required and "Graph API - POST https://graph.microsoft.com/v1.0/sites/{sitesId}/permissions, does not support delegated permissions. It only supports Application permissions." Reference document: https://learn.microsoft.com/en-us/graph/api/site-post-permissions?view=graph-rest-1.0&tabs=http#permissions

Hope this helps.

If the reply is helpful, please click "Accept Answer" and kindly upvote it. If you have additional questions about this answer, please click "Comment".