graph api Access denied

Question

I use delegation permission to obtain access token authorization. The user is a global administrator

The scope of authority is offline_ access User.ReadWrite.All Files.ReadWrite.All

I request the API to get the Same tenant subuser drive file

https://graph.microsoft.com/v1.0/users/xxx/drive/root/children

Return to access denied

https://graph.microsoft.com/v1.0/me/drive/root/children Return is normal

Please help me

Allen Wu · Accepted Answer · 2021-02-05 06:42:28Z

0

It is expected.

Please see the delegated permission Files.ReadWrite.All.

It allows the app to access all files the signed-user CAN access. This means that unless that user shares the file with you, you will not have permission to access it.

Let's focus on the application permission Files.ReadWrite.All.

This permission allows the app to access all files.

This difference is what makes you confusing.

So with delegated permission (user token), in addition to Files.ReadWrite.All, you still need to let others share the file with you before you can access it.

answered Feb 5, 2021 at 6:42

Allen Wu

16.6k1 gold badge15 silver badges21 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

graph api Access denied

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related