MS Graph API Propogation Time

Question

Hello,

We are using Microsoft Graph API with delegated rights to integrate functionality of Office365 to our IT solution. The IT solution is based on coordination of document groups, and those documents have to be edited in O365. Also, only limited amount people (certain people) need to have access to the documents in the document group. We have created this solution - when new document group coordination starts, we create a Group via Graph API, and add initial members as owners. Going on with coordination, additional people might be added to the group, we also add them as owners. While this works good on paper, in reality this happens: initial azure/sharepoint group can access to documents fine. After some people are added, we get a response, that everything is ok with the query, we see that people are in the group, but when they try to open the document, it says, that they don't have access to it and have to ask it via MS email. If they wait from 10 minutes to few hours, they have access without additionally request it.
As far as we understand, this is propogation time betweed azure and sharepoint. Is there any possibility to reduce it? Because in our case, clients cannot wait half a day to have access to the documents. Or ar we doing something wrong?

Delegated rights, that we use: Directory.ReadWrite.All, Files.ReadWrite.All, Group.ReadWrite.All, GroupMember.ReadWrite.All, Sites.ReadWrite.All, TeamMember.ReadWrite.All

Answer 1

Hi @Martynas Šatkus ,

Yes, there is a delay with membership sync.

For your requirement, I would suggest you use SharePoint CSOM instead to create SharePoint group and add members. In this way, it will work immediately

---

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Ok, I just have one more question, I have looked to SharePoint REST API documentation and all the queries go through "http://<site url>/"
This site url is tenant url or sharepoint group url?