Understanding the Role of Invitations in SharePoint and Microsoft 365 Drive Item Permissions

Grzegorz Dubiel 20 Reputation points
2024-05-08T10:21:35.27+00:00

Hello!

I'm trying to understand the role of invitations in drive item permissions within SharePoint and Microsoft 365. When I call the /permissions endpoint for a driveItem, I notice that the invitation object is not present. How can I trigger a scenario where the invitation object is included in permissions? Is this feasible? Can invitations affect drive item permissions in any scenario? Should I pay attention to this object when scanning file permissions?

This property can be found within the grantedToV2 object in the permission resource. Documentation reference: Permission resource - Microsoft Graph API.

SharePoint
SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
9,793 questions
SharePoint Development
SharePoint Development
SharePoint: A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.Development: The process of researching, productizing, and refining new or existing technologies.
2,701 questions
{count} votes

1 answer

Sort by: Most helpful
  1. RaytheonXie_MSFT 32,081 Reputation points Microsoft Vendor
    2024-05-09T02:55:36.48+00:00

    Hi @Grzegorz Dubiel,The permissions collection includes potentially sensitive information and may not be available for every caller.

    • For the owner of the item, all sharing permissions will be returned. This includes co-owners.
    • For a non-owner caller, only the sharing permissions that apply to the caller are returned.
    • Sharing permission properties that contain secrets (e.g. shareId and webUrl) are only returned for callers that are able to create the sharing permission.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.