OneDrive for business: app root folder when integrating with an application

Tricia Hernandez 11 Reputation points
2022-07-18T20:14:03.877+00:00

Hello,

We are interested in integrating our application to OneDrive (both personal and business accounts). I have looked at the documentation and see that it's possible to have a special app root folder that our application can use. Is having this app folder even feasible on OneDrive business accounts? The documentation says that only personal accounts can delegate the Files.ReadWrite.AppFolder permission to grant full access to the application. Is there a read-only permission that can be granted for accessing an app folder on business accounts? If there's no feasible way to use an app folder on business accounts, is there another mechanism that the application can safely to ensure it only has access to a limited set of a user drive's content?

Thanks,
Tricia
Senior Software Engineer at ForeFlight

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,006 questions
SharePoint Development
SharePoint Development
SharePoint: A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.Development: The process of researching, productizing, and refining new or existing technologies.
2,561 questions
SharePoint Server Development
SharePoint Server Development
SharePoint Server: A family of Microsoft on-premises document management and storage systems.Development: The process of researching, productizing, and refining new or existing technologies.
1,557 questions
0 comments No comments
{count} vote

3 answers

Sort by: Most helpful
  1. Tricia Hernandez 11 Reputation points
    2022-07-19T13:07:03.15+00:00

    Hello,

    Thank you for your reply. Unfortunately, a security group will not help me for my specific case. I'm asking about the best way to integrate my application with OneDrive business via the OneDrive API: https://learn.microsoft.com/en-us/onedrive/developer/rest-api/concepts/special-folders-appfolder?view=odsp-graph-online

    Is there a way to give app folder permissions (such as Files.ReadWrite.AppFolder) to an application that is integrating with a OneDrive business account via the OneDrive API?

    Thanks,
    Tricia

    1 person found this answer helpful.

  2. RaytheonXie_MSFT 29,041 Reputation points Microsoft Vendor
    2022-07-19T07:27:53.027+00:00

    Hi @Tricia Hernandez ,
    I will recommend you to use security group in onedrive. You can follow the steps to set the specified security groups to access OneDrive

    1. Go to Access control in the SharePoint admin center, and sign in with an account that has admin permissions for your organization.
    2. Select Limit OneDrive access.
    3. Select Limit OneDrive access to only users in specified security groups.

    222194-image.png

    1. Add the security groups you want to be able to use OneDrive and save.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


    0 comments No comments

  3. Tricia Hernandez 11 Reputation points
    2022-08-02T03:44:30.937+00:00

    What is the best way for an application to integrate with a one drive business account?

    Thanks,
    Tricia