SharePoint

Review the validated minimum OAuth scopes and Sites.Selected limitations for every SharePoint action.

Review the validated minimum standard delegated scope for every SharePoint action. Each action uses one content scope in addition to the connection baseline.

Eylem başına minimum kapsamlar

Her SharePoint bağlantısı ayrıca offline_access ve User.Read ister. These connection scopes apply in addition to the action scope in the table.

Eylem Açıklama Minimum kapsamlar

Add section to page section to page ekler. Sites.ReadWrite.All

Check file access whether bir dosya can be accessed kontrol eder. Files.Read.All

Copy file file kopyalar. Files.ReadWrite.All

Create attachment from URL an attachment from a URL oluşturur. Sites.Read.All

Create folder folder oluşturur. Files.ReadWrite.All

Create list list oluşturur. Sites.Manage.All

Create list item list item oluşturur. Sites.ReadWrite.All

Create page page oluşturur. Sites.ReadWrite.All

Download file file indirir. Files.Read.All

Find site users site kullanıcılar bulur. Sites.Read.All

Get column column alır. Sites.Read.All

Get drive drive alır. Files.Read.All

Get file file alır. Files.Read.All

Get file metadata file metadata alır. Files.Read.All

Get folder folder alır. Files.Read.All

Get list list alır. Sites.Read.All

Get list item list item alır. Sites.Read.All

Get page page alır. Sites.Read.All

Get profile profile alır. User.Read

Get sensitivity label the sensitivity label of bir dosya alır. Files.Read.All

Get site site alır. Sites.Read.All

List columns columns listeler. Sites.Read.All

List drive children drive children listeler. Files.Read.All

List drives drives listeler. Files.Read.All

List files in folder files in folder listeler. Files.Read.All

List files in SharePoint folder files in sharepoint folder listeler. Files.Read.All

List folder changes folder changes listeler. Files.Read.All

List list items list öğeler listeler. Sites.Read.All

List recent files recent dosyalar listeler. Sites.Read.All

List site lists site listeler listeler. Sites.Read.All

List site pages site pages listeler. Sites.Read.All

List subsites subsites listeler. Sites.Read.All

Move file file taşır. Files.ReadWrite.All

Query list items list öğeler sorgular. Sites.Read.All

Replace page content Replaces page content. Sites.ReadWrite.All

Resolve drive Resolves drive. Files.Read.All

Resolve file Resolves file. Files.Read.All

Resolve folder Resolves folder. Files.Read.All

Resolve list Resolves list. Sites.Read.All

Resolve page Resolves page. Sites.Read.All

Resolve parent Resolves parent. Files.Read.All

Resolve SharePoint URL Resolves a shared SharePoint URL. Files.Read.All

Resolve site Resolves site. Sites.Read.All

Search files files arar. Files.Read.All

Search SharePoint sharepoint arar. Sites.Read.All

Search sites sites arar. Sites.Read.All

Update list item list item günceller. Sites.ReadWrite.All

Update page title page title günceller. Sites.ReadWrite.All

Upload file file yükler. Files.ReadWrite.All

The validated mapping does not include SensitivityLabel.Read for Get sensitivity label. Add it when your Microsoft Purview setup requires it.

Actions affected by Sites.Selected

The following actions may not work completely with selected site permissions:

Uses Microsoft Graph GET /sites?search. This endpoint queries tenant-wide directory indexes and does not reliably return sites granted solely through Sites.Selected, so dynamic site discovery fails.

Uses Microsoft Search, which searches tenant-wide indexes based on the user's personal SharePoint permissions rather than the application's Sites.Selected grant. Search results can include items from sites outside your selected grant, though direct access to those ungranted items will still be denied.

tenant-wide Microsoft Search indexes. It may return file results from siteler outside the selected grant, although attempting to open or interact with those dosyalar will fail if permissions are not explicitly granted sorgular.

Resolves shared links through /shares/{shareToken}/driveItem. If a user provides a direct link to a file or folder on a granted site, resolution succeeds. If the link points to an ungranted site, Graph denies access even if the user individually has access in SharePoint.

Native features

Additionally, the following native features may be affected by a Selected grant:

• Folder Sync: Synchronizes local and cloud folders across your workspace.
• Company Knowledge: Indexes connected drives and documents for AI search and chat context.

When using selected-only permissions, dynamic site and library discovery does not work, preventing UI pickers from listing sites. While sync and indexing can read files from a granted site once exact site and drive paths are provided, automatic discovery is unavailable.

Create list requires manage permissions on the site.

Related pages

• Microsoft Integration Scopes
• Microsoft integrations: permissions and admin approval