What permissions are needed to use SharePoint REST API?

Question

Hello. I'm attempting to use the SharePoint REST API v1, but I keep receiving "Access denied" errors despite adding the necessary permissions. Could you please inform me of any additional permissions that might be required for me to proceed with this task?

Permissions -> SharePoint - Sites.Selected - Read and Write Access to the SharePoint site

These are the endpoints I'm working with:

1. GET https://{site_url}/_api/web/lists/getbytitle('{list_title}')/items({item_id})/AttachmentFiles
2. GET https://{site_url}/_api/web/lists/getbytitle('{list_title}')/items({item_id})/AttachmentFiles('{file_name}')/$value

To generate the access token, I am using the endpoint https://login.microsoftonline.com/{Tenant}/oauth2/v2.0/token with

Answer 1

Hello,

You have to create an application in EntralD and give it the right permissions (Sites.Selected). For the scope, try using the following when you create the application:

https://graph.microsoft.com/.default

Answer 2

Hi @Sesha,

You could refer to following steps to check if you have grant access to the token correctly. https://techcommunity.microsoft.com/t5/microsoft-sharepoint-blog/develop-applications-that-use-sites-selected-permissions-for-spo/ba-p/3790476

---If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment". Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.