Share via

Graph API security over granted than assigned

Revanth T 0 Reputation points
2024-02-05T06:24:30.73+00:00

App registered with Delegate permissions to 'Files.ReadWrite.ALL' is able to access any folder present in Sharepoint. Expected the application to only access the user folders only.

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,449 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. CarlZhao-MSFT 40,311 Reputation points
    2024-02-05T09:34:18.4033333+00:00

    Hi @Revanth T

    For user contexts, more granular access permissions have not yet been released. That is, you can only restrict the permission to specific users but cannot restrict the access scope of the permission to specific sites or folders.

    Hope this helps.

    If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.