openapi: 3.1.0 info: title: Microsoft Graph Admin Admin.admin Shares.permission API description: 'Microsoft Graph API for managing administrative resources in Microsoft Entra ID. This API enables administrators to manage Microsoft Edge browser settings, Internet Explorer mode configurations, site lists, shared browser sites, Microsoft 365 Apps installation options, people insights, service announcements, SharePoint settings, Copilot administration, directory administrative units, and admin consent policies.' version: 1.0.0 contact: name: Microsoft Graph API Support url: https://developer.microsoft.com/graph servers: - url: https://graph.microsoft.com/v1.0 description: Microsoft Graph API v1.0 endpoint tags: - name: Shares.permission x-ms-docs-toc-type: page paths: /shares/{sharedDriveItem-id}/permission: description: Provides operations to manage the permission property of the microsoft.graph.sharedDriveItem entity. parameters: - name: sharedDriveItem-id in: path description: The unique identifier of sharedDriveItem required: true schema: type: string x-ms-docs-key-type: sharedDriveItem get: tags: - Shares.permission summary: Microsoft Graph Get permission from shares description: Used to access the permission representing the underlying sharing link operationId: shares.GetPermission parameters: - name: $select in: query description: Select properties to be returned style: form explode: false schema: uniqueItems: true type: array items: type: string - name: $expand in: query description: Expand related entities style: form explode: false schema: uniqueItems: true type: array items: type: string responses: 2XX: description: Retrieved navigation property content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.permission' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' x-ms-docs-operation-type: operation patch: tags: - Shares.permission summary: Microsoft Graph Update the navigation property permission in shares operationId: shares.UpdatePermission requestBody: description: New navigation property values content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.permission' required: true responses: 2XX: description: Success content: application/json: schema: $ref: '#/components/schemas/microsoft.graph.permission' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' x-ms-docs-operation-type: operation delete: tags: - Shares.permission summary: Microsoft Graph Delete navigation property permission for shares operationId: shares.DeletePermission parameters: - name: If-Match in: header description: ETag schema: type: string responses: '204': description: Success 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' x-ms-docs-operation-type: operation /shares/{sharedDriveItem-id}/permission/grant: description: Provides operations to call the grant method. parameters: - name: sharedDriveItem-id in: path description: The unique identifier of sharedDriveItem required: true schema: type: string x-ms-docs-key-type: sharedDriveItem post: tags: - Shares.permission summary: Microsoft Graph Invoke action grant description: Grant users access to a link represented by a permission. externalDocs: description: Find more info here url: https://learn.microsoft.com/graph/api/permission-grant?view=graph-rest-1.0 operationId: shares.sharedDriveItem.permission.grant requestBody: description: Action parameters content: application/json: schema: type: object properties: roles: type: array items: type: string nullable: true recipients: type: array items: $ref: '#/components/schemas/microsoft.graph.driveRecipient' required: true responses: 2XX: description: Success content: application/json: schema: title: Collection of permission type: object allOf: - $ref: '#/components/schemas/BaseCollectionPaginationCountResponse' - type: object properties: value: type: array items: $ref: '#/components/schemas/microsoft.graph.permission' 4XX: $ref: '#/components/responses/error' 5XX: $ref: '#/components/responses/error' x-ms-docs-operation-type: action x-ms-pageable: nextLinkName: '@odata.nextLink' operationName: listMore components: schemas: microsoft.graph.ODataErrors.MainError: required: - code - message type: object properties: code: type: string message: type: string x-ms-primary-error-message: true target: type: string nullable: true details: type: array items: $ref: '#/components/schemas/microsoft.graph.ODataErrors.ErrorDetails' innerError: $ref: '#/components/schemas/microsoft.graph.ODataErrors.InnerError' microsoft.graph.sharePointIdentitySet: allOf: - $ref: '#/components/schemas/microsoft.graph.identitySet' - title: sharePointIdentitySet required: - '@odata.type' type: object properties: group: anyOf: - $ref: '#/components/schemas/microsoft.graph.identity' - type: object nullable: true description: The group associated with this action. Optional. siteGroup: anyOf: - $ref: '#/components/schemas/microsoft.graph.sharePointIdentity' - type: object nullable: true description: The SharePoint group associated with this action. Optional. siteUser: anyOf: - $ref: '#/components/schemas/microsoft.graph.sharePointIdentity' - type: object nullable: true description: The SharePoint user associated with this action. Optional. '@odata.type': type: string default: '#microsoft.graph.sharePointIdentitySet' x-ms-discriminator-value: '#microsoft.graph.sharePointIdentitySet' microsoft.graph.identity: title: identity required: - '@odata.type' type: object properties: displayName: type: string description: The display name of the identity.For drive items, the display name might not always be available or up to date. For example, if a user changes their display name the API might show the new value in a future response, but the items associated with the user don't show up as changed when using delta. nullable: true id: type: string description: Unique identifier for the identity or actor. For example, in the access reviews decisions API, this property might record the id of the principal, that is, the group, user, or application that's subject to review. nullable: true '@odata.type': type: string discriminator: propertyName: '@odata.type' mapping: '#microsoft.graph.azureCommunicationServicesUserIdentity': '#/components/schemas/microsoft.graph.azureCommunicationServicesUserIdentity' '#microsoft.graph.communicationsApplicationIdentity': '#/components/schemas/microsoft.graph.communicationsApplicationIdentity' '#microsoft.graph.communicationsApplicationInstanceIdentity': '#/components/schemas/microsoft.graph.communicationsApplicationInstanceIdentity' '#microsoft.graph.communicationsEncryptedIdentity': '#/components/schemas/microsoft.graph.communicationsEncryptedIdentity' '#microsoft.graph.communicationsGuestIdentity': '#/components/schemas/microsoft.graph.communicationsGuestIdentity' '#microsoft.graph.communicationsPhoneIdentity': '#/components/schemas/microsoft.graph.communicationsPhoneIdentity' '#microsoft.graph.communicationsUserIdentity': '#/components/schemas/microsoft.graph.communicationsUserIdentity' '#microsoft.graph.emailIdentity': '#/components/schemas/microsoft.graph.emailIdentity' '#microsoft.graph.initiator': '#/components/schemas/microsoft.graph.initiator' '#microsoft.graph.provisionedIdentity': '#/components/schemas/microsoft.graph.provisionedIdentity' '#microsoft.graph.provisioningServicePrincipal': '#/components/schemas/microsoft.graph.provisioningServicePrincipal' '#microsoft.graph.provisioningSystem': '#/components/schemas/microsoft.graph.provisioningSystem' '#microsoft.graph.servicePrincipalIdentity': '#/components/schemas/microsoft.graph.servicePrincipalIdentity' '#microsoft.graph.sharePointIdentity': '#/components/schemas/microsoft.graph.sharePointIdentity' '#microsoft.graph.teamworkApplicationIdentity': '#/components/schemas/microsoft.graph.teamworkApplicationIdentity' '#microsoft.graph.teamworkConversationIdentity': '#/components/schemas/microsoft.graph.teamworkConversationIdentity' '#microsoft.graph.teamworkTagIdentity': '#/components/schemas/microsoft.graph.teamworkTagIdentity' '#microsoft.graph.teamworkUserIdentity': '#/components/schemas/microsoft.graph.teamworkUserIdentity' '#microsoft.graph.userIdentity': '#/components/schemas/microsoft.graph.userIdentity' '#microsoft.graph.callRecords.userIdentity': '#/components/schemas/microsoft.graph.callRecords.userIdentity' microsoft.graph.itemReference: title: itemReference required: - '@odata.type' type: object properties: driveId: type: string description: Unique identifier of the drive instance that contains the driveItem. Only returned if the item is located in a drive. Read-only. nullable: true driveType: type: string description: Identifies the type of drive. Only returned if the item is located in a drive. See drive resource for values. nullable: true id: type: string description: Unique identifier of the driveItem in the drive or a listItem in a list. Read-only. nullable: true name: type: string description: The name of the item being referenced. Read-only. nullable: true path: type: string description: Percent-encoded path that can be used to navigate to the item. Read-only. nullable: true shareId: type: string description: A unique identifier for a shared resource that can be accessed via the Shares API. nullable: true sharepointIds: anyOf: - $ref: '#/components/schemas/microsoft.graph.sharepointIds' - type: object nullable: true description: Returns identifiers useful for SharePoint REST compatibility. Read-only. siteId: type: string description: For OneDrive for Business and SharePoint, this property represents the ID of the site that contains the parent document library of the driveItem resource or the parent list of the listItem resource. The value is the same as the id property of that site resource. It is an opaque string that consists of three identifiers of the site. For OneDrive, this property is not populated. nullable: true '@odata.type': type: string microsoft.graph.ODataErrors.ErrorDetails: required: - code - message type: object properties: code: type: string message: type: string target: type: string nullable: true microsoft.graph.sharingLink: title: sharingLink required: - '@odata.type' type: object properties: application: anyOf: - $ref: '#/components/schemas/microsoft.graph.identity' - type: object nullable: true description: The app the link is associated with. preventsDownload: type: boolean description: If true then the user can only use this link to view the item on the web, and cannot use it to download the contents of the item. Only for OneDrive for Business and SharePoint. nullable: true scope: type: string description: The scope of the link represented by this permission. Value anonymous indicates the link is usable by anyone, organization indicates the link is only usable for users signed into the same tenant. nullable: true type: type: string description: The type of the link created. nullable: true webHtml: type: string description: For embed links, this property contains the HTML code for an