FileAccessError Class
Raised when the identity used was refused by the storage service.
Distinct from FileUrlExpiredError, which means a pre-authorized URL lapsed and no usable Graph route existed. This error means the Graph route was the one that failed, refused by the service after the request was made.
Constructor
FileAccessError(status: int, actor: Literal['app', 'agentic_user'] | None = None, details: str | None = None)Parameters
| Name | Description |
|---|---|
|
status
Required
|
|
|
actor
|
Default value: None
|
|
details
|
Default value: None
|
Attributes
actor
The identity the fetch was attempted as, when one was selected. None when the failure preceded selection.
actor: Literal['app', 'agentic_user'] | Nonedetails
What the storage service itself said, verbatim and truncated, when it said anything.
A 403 covers an unconsented scope, a file the identity was never granted, and a drive item that does not exist, which are indistinguishable on the wire: Graph answers all three with 403, because telling an unauthorized caller whether a resource exists would disclose it. That collapse is right for branching and wrong for diagnosis, so the original text is kept here rather than discarded.
details: str | Nonestatus
Lets callers branch without string-matching the message. 401 means the token itself was rejected; 403 means the identity lacks the grant, and the two have different remedies.
status: int