FileStorageContainer.Manage.All

Allows the application to utilize the file storage container administration capabilities on behalf of an administrator user.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the FileStorageContainer.Manage.All permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	-	527b6d64-cdf5-4b8b-b336-4aa0b8ca2ce5
DisplayText	-	Manage all file storage containers
Description	-	Allows the application to utilize the file storage container administration capabilities on behalf of an administrator user.
AdminConsentRequired	Yes	Yes

Graph Methods

• API [v1.0]
• API [beta]
• PowerShell [v1.0]
• PowerShell [beta]

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	DELETE /storage/fileStorage/containers/{containerId}
	DELETE /storage/fileStorage/containers/{containerId}/permissions/{permissionId}
	DELETE /storage/fileStorage/deletedContainers/{containerId}
	GET /storage/fileStorage/containers?$filter=containerTypeId eq {containerTypeId}
	GET /storage/fileStorage/containers?$filter=containerTypeId eq {containerTypeId} and viewpoint/effectiveRole eq 'principalOwner'
	GET /storage/fileStorage/containers/{containerId}
	GET /storage/fileStorage/containers/{containerId}/permissions
	PATCH /storage/fileStorage/containers/{containerId}
	PATCH /storage/fileStorage/containers/{containerId}/permissions/{permissionId}
	POST /storage/fileStorage/containers/{containerId}/lock
	POST /storage/fileStorage/containers/{containerId}/permanentDelete
	POST /storage/fileStorage/containers/{containerId}/permissions
	POST /storage/fileStorage/containers/{containerId}/unlock
	POST /storage/fileStorage/deletedContainers/{containerId}/restore

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

• driveItem
• enums
• fileStorageContainer
• Permission
• sharePointIdentitySet

Graph reference: driveItem

Property	Type	Description
audio	[audio][]	Audio metadata, if the item is an audio file. Read-only. Read-only. Only on OneDrive Personal.
bundle	[bundle][]	Bundle metadata, if the item is a bundle. Read-only.
content	Stream	The content stream, if the item represents a file.
createdBy	[identitySet][]	Identity of the user, device, and application that created the item. Read-only.
createdDateTime	DateTimeOffset	Date and time of item creation. Read-only.
cTag	String	An eTag for the content of the item. This eTag isn't changed if only the metadata is changed. Note This property isn't returned if the item is a folder. Read-only.
deleted	[deleted][]	Information about the deleted state of the item. Read-only.
description	String	Provides a user-visible description of the item. Read-write. Only on OneDrive Personal.
eTag	String	eTag for the entire item (metadata + content). Read-only.
file	[file][]	File metadata, if the item is a file. Read-only.
fileSystemInfo	[fileSystemInfo][]	File system information on client. Read-write.
folder	[folder][]	Folder metadata, if the item is a folder. Read-only.
id	String	The unique identifier of the item within the Drive. Read-only.
image	[image][]	Image metadata, if the item is an image. Read-only.
lastModifiedBy	[identitySet][]	Identity of the user, device, and application that last modified the item. Read-only.
lastModifiedDateTime	DateTimeOffset	Date and time the item was last modified. Read-only.
location	[geoCoordinates][]	Location metadata, if the item has location data. Read-only.
malware	[malware][]	Malware metadata, if the item was detected to contain malware. Read-only.
name	String	The name of the item (filename and extension). Read-write.
package	[package][]	If present, indicates that this item is a package instead of a folder or file. Packages are treated like files in some contexts and folders in others. Read-only.
parentReference	[itemReference][]	Parent information, if the item has a parent. Read-write.
pendingOperations	[pendingOperations][]	If present, indicates that one or more operations that might affect the state of the driveItem are pending completion. Read-only.
photo	[photo][]	Photo metadata, if the item is a photo. Read-only.
publication	[publicationFacet][]	Provides information about the published or checked-out state of an item, in locations that support such actions. This property isn't returned by default. Read-only.
remoteItem	[remoteItem][]	Remote item data, if the item is shared from a drive other than the one being accessed. Read-only.
root	[root][]	If this property is non-null, it indicates that the driveItem is the top-most driveItem in the drive.
searchResult	[searchResult][]	Search metadata, if the item is from a search result. Read-only.
shared	[shared][]	Indicates that the item was shared with others and provides information about the shared state of the item. Read-only.
sharepointIds	[sharepointIds][]	Returns identifiers useful for SharePoint REST compatibility. Read-only.
size	Int64	Size of the item in bytes. Read-only.
specialFolder	[specialFolder][]	If the current item is also available as a special folder, this facet is returned. Read-only.
video	[video][]	Video metadata, if the item is a video. Read-only.
webDavUrl	String	WebDAV compatible URL for the item.
webUrl	String	URL that displays the resource in the browser. Read-only.