Forum Discussion

ShaneGibson's avatar
ShaneGibson
Copper Contributor
Sep 28, 2023
Solved

Microsoft Graph PowerShell SDK Module OneDrive Folder Permissions Assignment

As an M365 Global Admin, I have been tasked with creating a new folder in other users OneDrive root folder (Documents) we can call that folder 'myFolder', then I need to assign a Microsoft Azure Secu...
admin
api
Authentication
Azure AD
Identity
microsoft 365 admin center
Microsoft 365 Groups
Microsoft Graph
onedrive
powershell
  • Tristan999's avatar
    Tristan999
    Oct 06, 2023

    It would be helpful if you posted some code snippets for the Graph request.

    I am not sure if you are stuck with Microsoft Graph PowerShell, but I was able to do what you needed to do with PnP PowerShell:

    $url = "<ONEDRIVEURL>"
    Connect-PnPOnline -Url $url -Interactive
    $oneDriveDefaultListName = "Documents"
    $folderToCreate = "myFolder"
    $securityGroupToAdd = "Group1"
    $permission = "Contribute"
    Add-PnPFolder -Name $folderToCreate -Folder $oneDriveDefaultListName
    Set-PnPFolderPermission -List $oneDriveDefaultListName -Identity "$oneDriveDefaultListName/$folderToCreate" -User $securityGroupToAdd -AddRole $permission

    If you are stuck with Graph API (and Azure Security Groups), maybe take a look at these links:

     

    Send an invite to access an item - Microsoft Graph v1.0 | Microsoft Learn


    https://learn.microsoft.com/en-us/graph/api/resources/driverecipient?view=graph-rest-1.0#properties

ShaneGibson's avatar
ShaneGibson
Copper Contributor
Oct 09, 2023
Just to confirm the PnP Powershell does work, I would still like to get it done in Graph, but wanted to say that my test with PnP Powershell with your post worked properly! I did have to add myself as a site collection admin on the onedrive site though. I will post error and answer questions for MS Graph after my meeting but thank you again for the help, greatly appreciate it!
Tristan999's avatar
Tristan999
Iron Contributor
Oct 09, 2023
No problem! PnP is just a wrapper, in the backend it's probably using Graph/CSOM. Yes, I forgot to mention that you will have to add two additional lines to add yourself to the site collection admin for one drive that you do not own and then remove yourself.

Resources