← cd ~/graph-permissions
// graph-permissions · Files
Files.ReadWrite.SelectedMicrosoft Graph permission · Low risk
(Preview) Allows the app to read and write files that the user selects. The app has access for several hours after the user selects a file.
Delegated permission
Low riskRead and write files that the user selects (preview). (Preview) Allows the app to read and write files that the user selects. The app has access for several hours after the user selects a file.
| ID | 17dde5bd-8c17-420f-a486-969730c1b827 |
|---|---|
| Consent | Users can consent, if your consent settings allow it |
| Risk | Only reaches the specific sites, lists or items an admin grants it, which makes it the least-privilege choice. |
Ask for it when signing in
Delegated permissions act as the signed-in user, so the app can never do more than that user can.
Connect-MgGraph -Scopes "Files.ReadWrite.Selected"Which apps already have it?
# Apps with delegated consent for Files.ReadWrite.Selected
Connect-MgGraph -Scopes "Application.Read.All", "Directory.Read.All"
$graph = Get-MgServicePrincipal -Filter "appId eq '00000003-0000-0000-c000-000000000000'"
Get-MgOauth2PermissionGrant -All |
Where-Object { $_.ResourceId -eq $graph.Id -and ($_.Scope -split " ") -contains "Files.ReadWrite.Selected" } |
Select-Object ClientId, ConsentType, PrincipalId