Skip to content
ajan.io

Docs menu

On this page

Microsoft OneDrive

Review the validated minimum OAuth scopes and Sites.Selected limitations for every Microsoft OneDrive action.

Review the validated minimum standard delegated scopes for every Microsoft OneDrive action. The mapping covers personal OneDrive files and site or group drives.

Minimal scopes per action

Action Description Minimum scopes

Check file access Checks whether a file can be accessed. Files.Read.All

Create folder Creates folder. Files.ReadWrite.All

Download file Downloads file. Files.Read.All

Download OneDrive file Downloads a OneDrive file. Files.Read.All

Get file metadata Gets file metadata. Files.Read.All

Get folder by name Gets a folder by name. Files.Read.All

List available drives Lists available drives. Files.Read.AllSites.Read.AllGroup.Read.All

List files in folder Lists files in folder. Files.Read.All

List files in OneDrive folder Lists files in a OneDrive folder from a folder URL. Files.Read.All

List folder changes Lists folder changes. Files.Read.All

Resolve drive Resolves drive. Files.Read.All

Resolve file Resolves file. Files.Read

Resolve folder Resolves folder. Files.Read.All

Search files Searches files. Files.Read.All

Search OneDrive Searches OneDrive. Files.Read.All

Upload file Uploads file. Files.ReadWrite

Some rows use a thinner scope because the action only reaches personal OneDrive:

  • Resolve file uses Files.Read for personal /me/drive, including an explicit personal drive ID.
  • Upload file writes only to personal /me/drive, so Files.ReadWrite is enough.
  • Create folder needs Files.ReadWrite.All to write to an arbitrary site drive.
  • List available drives also needs Group.Read.All for /me/memberOf and Sites.Read.All for followed-site discovery.
  • Shared-link resolution through /shares works with Files.Read.All. Site and group drive reads need Files.Read.All.

Actions affected by Sites.Selected

The following actions may not work completely with selected site permissions:

The List available drives action discovers personal, group, and followed-site drives. These discovery results are empty with selected-only permissions, and the action reports notices for group and SharePoint discovery.

The Resolve drive action can resolve a known drive ID, but its name search enumerates /me/drives. That enumeration is empty with selected-only permissions.

The Resolve folder action starts with personal /me/drives and fans out across those drives. It does not resolve site folder IDs with selected-only permissions.

The Resolve file action accesses personal OneDrive only. Sites.Selected does not apply, and personal /me/drives is empty with selected-only permissions.

The Upload file action writes to personal OneDrive only. Sites.Selected does not apply, and personal /me/drives is empty with selected-only permissions.

Native features

Additionally, the following native features may be affected by a Selected grant:

  • Folder Sync: Synchronizes local and cloud folders across your workspace.
  • Company Knowledge: Indexes connected drives and documents for AI search and chat context.

When using selected-only permissions, the drive picker cannot list granted site drives because the underlying drive discovery relies on broad listing actions. While ajan can still read known files from a granted site if you provide explicit drive and item IDs, dynamic browsing and automatic drive selection in the UI will not work.