Microsoft Graph PowerShell SDK Module OneDrive Folder Permissions Assignment

Hi ShaneGibson,

To assign permissions to a OneDrive folder using the Microsoft Graph PowerShell SDK Module, you can try use the following steps:

1. Install the Microsoft Graph PowerShell SDK Module.
2. Connect to Microsoft Graph using the Connect-MgGraph cmdlet.
3. Get the ID of the OneDrive folder that you want to assign permissions to. You can do this using the Get-MgDriveItem cmdlet.
4. Create a new permission object. You can do this using the New-MgDriveItemPermission cmdlet.
5. Set the permission object's properties. The following properties are required:
   • RoleId: The role that you want to assign to the user or group. For read/write permissions, you would use the Contributor role.
   • PrincipalId: The ID of the user or group that you want to assign permissions to. You can get the ID of a user or group using the Get-MgUser cmdlet or the Get-MgGroup cmdlet, respectively.
6. Add the permission object to the OneDrive folder. You can do this using the Add-MgDriveItemPermission cmdlet.
7. Disconnect from Microsoft Graph using the Disconnect-MgGraph cmdlet.

Here is a PowerShell script that you can use to assign read/write permissions to a OneDrive folder for a Microsoft Azure Security group:

# Import the Microsoft Graph PowerShell SDK Module
Import-Module Microsoft.Graph.PowerShell.SDK

# Connect to Microsoft Graph
Connect-MgGraph -AccessToken $accessToken

# Get the ID of the OneDrive folder that you want to assign permissions to
$folderId = Get-MgDriveItem -Path "root/Documents"

# Create a new permission object
$permission = New-MgDriveItemPermission -RoleId "Contributor" -PrincipalId "email address removed for privacy reasons"

# Add the permission object to the OneDrive folder
Add-MgDriveItemPermission -DriveItemId $folderId -Permission $permission

# Disconnect from Microsoft Graph
Disconnect-MgGraph

To loop through a list of users and create the folder and assign permissions for each user, you can use the following PowerShell script:

# Import the Microsoft Graph PowerShell SDK Module
Import-Module Microsoft.Graph.PowerShell.SDK

# Connect to Microsoft Graph
Connect-MgGraph -AccessToken $accessToken

# Get the IDs of the OneDrive folders that you want to create
$folderIds = @()
foreach ($user in Get-Content "users.txt") {
    $folderId = New-MgDriveItem -Path "root/Documents/myFolder" -Name $user
    $folderIds += $folderId
}

# Create a new permission object
$permission = New-MgDriveItemPermission -RoleId "Contributor" -PrincipalId "email address removed for privacy reasons"

# Add the permission object to each OneDrive folder
foreach ($folderId in $folderIds) {
    Add-MgDriveItemPermission -DriveItemId $folderId -Permission $permission
}

# Disconnect from Microsoft Graph
Disconnect-MgGraph