Microsoft Graph Permissions, how to access only the files under a specific group only

Question

Hi,

I want to be able to access as Files.ReadWrite, only the files under a specific group. I dont want to allow access to all organization files or a specific user files, only to that specific group files.

I want to access this group files with a deamon app, that will run at background.

How can I achieve this at entra -> app registration -> api permissions.

Answer 1

Use the Sites.Selected scope as detailed here: https://learn.microsoft.com/en-us/graph/permissions-selected-overview?tabs=http

If you want to grant permissions to specific files only, use Files.SelectedOperations.Selected instead.