Restrict app access of graph apis to specific folder of share point

Question

Restrict app access of graph apis to specific folder of share point

Geetika Garg 0

While restricting an app to access a particular folder in a site only, I used
POST https://graph.microsoft.com/v1.0/sites/{siteId}/drives/{driveId}/items/{itemId}/permissions { "roles": [ "read" ], "grantedTo": { "application": { "id": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" } } }
. If i check using permissions GET api, I get a permission for the app ID.
However , when I try and access the contents of the folder using this app, I get accessDenied.

Note: I have given Sites.Specific permissions to this app.

Bloxstrap 0 Reputation points

2025-01-13T07:47:02.4966667+00:00

Hello, I’m seeking guidance on restricting Graph API access to a specific SharePoint folder for better data control in my Bloxstrap R63 setup. Could you assist with this configuration?

2 answers

Your answer

Bloxstrap 0 Reputation points

2025-01-13T07:47:02.4966667+00:00

Hello, I’m seeking guidance on restricting Graph API access to a specific SharePoint folder for better data control in my Bloxstrap R63 setup. Could you assist with this configuration?

Answer 1

Vasil Michev 116K MVP

As mentioned in the other thread, you need the Files.SelectedOperations.Selected scope, not Sites.Selected.

Ling Zhou_MSFT 23,360 Reputation points Microsoft External Staff

2025-01-09T05:42:18.25+00:00

Hi @Geetika Garg,

Hope this comment finds you in good health.

First of all, many thanks to Vasil Michev for his answer. I have tested and after adding Files.SelectedOperations.Selected permission to the app I was able to successfully access files in a folder in a site.

Also, I checked the difference between Sites.Selected and Files.SelectedOperations.Selected. Files.SelectedOperations.Selected is correct if you need to access a file in a folder in a site.

Reference: Microsoft Graph permissions reference

If you have any questions, please do not hesitate to contact us.

Moreover, if the issue can be fixed successfully, please click "Accept Answer" for Vasil Michev's answer so that we can better archive the case and the other community members who are suffering the same issue can benefit from it.

Your kind contribution is much appreciated.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Yanli Jiang - MSFT 31,106 Reputation points Microsoft External Staff

2025-01-16T09:33:18.9466667+00:00

Hi @Geetika Garg,

Hope you are doing well.

We're looking forward whether you still have confusion on this issue , could we offer more support? If this helps on your issue, you could mark it as answer so other user with similar problem could see this easier. :-)
Ling Zhou_MSFT 23,360 Reputation points Microsoft External Staff

2025-01-24T08:31:35.45+00:00

Hi @Geetika Garg,

Please kindly consider this comment as a warm follow up. We would appreciate it if you would like to share a recent update on your problem.

Anything else I can help, feel free to let me know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. By doing so, it will benefit all community members who are having this similar issue. Your contribution is highly appreciated.

Answer 2

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Share via

Restrict app access of graph apis to specific folder of share point

2 answers

Your answer