Sharepoint Permissions on Consent Screen

Question

I have the following permissions set on my application:

My authorization URL looks like the following as well:

https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=XXX&redirect_uri=XXX&response_type=code&response_mode=query&scope=offline_access+user.read+files.readwrite.all+sites.readwrite.all

However, my consent screen does not show the sharepoint permissions:

I am trying to use the drive-list API call to list both OneDrive and Sharepoint destinations to write files to. I don't see the Sharepoint permission on the consent screen and my users are not seeing their Sharepoint drives being listed so I assume this is an issue with the permissions. What am I missing?

Answer 1

Looks like you already have the site permissions, that's why the consent pop won't come, kindly check your scopes by decoding the access token on jwt.ms.

Thanks

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Answer 2

Hi @Steve 4848

Personal accounts cannot consent to the Sites.ReadWrite.All delegated permission. Because Sites.ReadWrite.All is a SharePoint-specific permission, and SharePoint's target user is a team or organization rather than an personal account. Unless your personal account is invited to an organization or team as a collaborative user.

Only OneDrive supports personal accounts, and the Files.ReadWrite.All permission is sufficient if you're just working with files in OneDrive.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.