I am using rest API role assignment for SharePoint Online with Oauth2.0 to fetch advanced permissions. But, I cannot give Full Control Scope to my Application. Is there any other way where I can get permissions given to folders with read only scope.

enter image description here


As far as I know, only full control permissions can get role assignments with rest api.

So you have to give Full Control Scope to your app.

<AppPermissionRequests AllowAppOnlyPolicy="true">
<AppPermissionRequest Scope="http://sharepoint/content/sitecollection/web/list" Right="FullControl"/>
<AppPermissionRequest Scope="http://sharepoint/content/sitecollection/web" Right="FullControl"/>
  • Thanks .Is there any minimum permissions set which we can use or any other alternate API? – Sayali A. Rathi Dec 30 '20 at 6:42
  • May be you could use graph api to get permissions of folders: docs.microsoft.com/en-us/graph/api/… – Michael Han_MSFT Dec 30 '20 at 7:16
  • The minimum permissions of the app you need to give: Files.Read.All, Files.ReadWrite.All, Sites.Read.All, Sites.ReadWrite.All – Michael Han_MSFT Dec 30 '20 at 7:19
  • I need advanced permissions which does not come in graph API. So is there any other API in graph where I can get advanced permissions. – Sayali A. Rathi Jan 4 at 5:58
  • I have updated question with set of permissions which are not visible by graph API. – Sayali A. Rathi Jan 4 at 6:21

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.