Forum Discussion

Copper Contributor

Sep 28, 2023

Solved

Microsoft Graph PowerShell SDK Module OneDrive Folder Permissions Assignment

As an M365 Global Admin, I have been tasked with creating a new folder in other users OneDrive root folder (Documents) we can call that folder 'myFolder', then I need to assign a Microsoft Azure Secu...

microsoft 365 admin center

Tristan999
Oct 06, 2023
It would be helpful if you posted some code snippets for the Graph request.

I am not sure if you are stuck with Microsoft Graph PowerShell, but I was able to do what you needed to do with PnP PowerShell:

$url = "<ONEDRIVEURL>"
Connect-PnPOnline -Url $url -Interactive
$oneDriveDefaultListName = "Documents"
$folderToCreate = "myFolder"
$securityGroupToAdd = "Group1"
$permission = "Contribute"
Add-PnPFolder -Name $folderToCreate -Folder $oneDriveDefaultListName
Set-PnPFolderPermission -List $oneDriveDefaultListName -Identity "$oneDriveDefaultListName/$folderToCreate" -User $securityGroupToAdd -AddRole $permission

If you are stuck with Graph API (and Azure Security Groups), maybe take a look at these links:

Send an invite to access an item - Microsoft Graph v1.0 | Microsoft Learn

https://learn.microsoft.com/en-us/graph/api/resources/driverecipient?view=graph-rest-1.0#properties

Tristan999

Iron Contributor

Oct 06, 2023

It would be helpful if you posted some code snippets for the Graph request.

I am not sure if you are stuck with Microsoft Graph PowerShell, but I was able to do what you needed to do with PnP PowerShell:

$url = "<ONEDRIVEURL>"
Connect-PnPOnline -Url $url -Interactive
$oneDriveDefaultListName = "Documents"
$folderToCreate = "myFolder"
$securityGroupToAdd = "Group1"
$permission = "Contribute"
Add-PnPFolder -Name $folderToCreate -Folder $oneDriveDefaultListName
Set-PnPFolderPermission -List $oneDriveDefaultListName -Identity "$oneDriveDefaultListName/$folderToCreate" -User $securityGroupToAdd -AddRole $permission

If you are stuck with Graph API (and Azure Security Groups), maybe take a look at these links:

Send an invite to access an item - Microsoft Graph v1.0 | Microsoft Learn

https://learn.microsoft.com/en-us/graph/api/resources/driverecipient?view=graph-rest-1.0#properties

ShaneGibson

Copper Contributor

Oct 09, 2023

Just to confirm the PnP Powershell does work, I would still like to get it done in Graph, but wanted to say that my test with PnP Powershell with your post worked properly! I did have to add myself as a site collection admin on the onedrive site though. I will post error and answer questions for MS Graph after my meeting but thank you again for the help, greatly appreciate it!

Tristan999
Iron Contributor
Oct 09, 2023
No problem! PnP is just a wrapper, in the backend it's probably using Graph/CSOM. Yes, I forgot to mention that you will have to add two additional lines to add yourself to the site collection admin for one drive that you do not own and then remove yourself.