FileStorageContainer.Selected

Allows the application to utilize the file storage container platform to manage containers on behalf of the signed in user. The specific file storage containers and the permissions granted to them will be configured in Microsoft 365 by the developer of each container type.

Merill's Note

For an app to access data in Microsoft Graph, the user or administrator must grant it the permissions it needs. This article lists all the Microsoft Graph APIs and your tenant data that can be accessed by the application (vendor/developer) if you consent to the FileStorageContainer.Selected permission.

If you need to create an audit report of the permissions granted to all the apps in your tenant, you can run the Export-MsIdAppConsentGrantReport command. See How To: Run a quick OAuth app audit of your tenant

Category	Application	Delegated
Identifier	40dc41bc-0f7e-42ff-89bd-d9516947e474	085ca537-6565-41c2-aca7-db852babc212
DisplayText	Access selected file storage containers	Access selected file storage containers
Description	Allows the application to utilize the file storage container platform to manage containers, without a signed-in user. The specific file storage containers and the permissions granted to them will be configured in Microsoft 365 by the developer of each container type.	Allows the application to utilize the file storage container platform to manage containers on behalf of the signed in user. The specific file storage containers and the permissions granted to them will be configured in Microsoft 365 by the developer of each container type.
AdminConsentRequired	Yes	Yes

Graph Methods

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	DELETE /storage/fileStorage/containers/{containerId}
	DELETE /storage/fileStorage/containers/{containerId}/permissions/{permissionId}
	GET /drives/{driveId}
	GET /storage/fileStorage/containers?$filter=containerTypeId eq {containerTypeId}
	GET /storage/fileStorage/containers?$filter=containerTypeId eq {containerTypeId} and viewpoint/effectiveRole eq 'principalOwner'
	GET /storage/fileStorage/containers/{containerId}
	GET /storage/fileStorage/containers/{containerId}/customProperties
	GET /storage/fileStorage/containers/{containerId}/customProperties/{propertyName}
	GET /storage/fileStorage/containers/{containerId}/drive
	GET /storage/fileStorage/containers/{containerId}/permissions
	PATCH /storage/fileStorage/containers/{containerId}
	PATCH /storage/fileStorage/containers/{containerId}/customProperties
	PATCH /storage/fileStorage/containers/{containerId}/permissions/{permissionId}
	POST /storage/fileStorage/containers
	POST /storage/fileStorage/containers/{containerId}/activate
	POST /storage/fileStorage/containers/{containerId}/permanentDelete
	POST /storage/fileStorage/containers/{containerId}/permissions

→ API supports delegated access (access on behalf of a user)
→ API supports app-only access (access without a user)

	Methods
	DELETE /storage/fileStorage/containers/{containerId}
	DELETE /storage/fileStorage/containers/{containerId}/permissions/{permissionId}
	DELETE /storage/fileStorage/deletedContainers/{containerId}
	DELETE /storageContainers/{containerId}/columns/{columnId}
	GET /drives/{driveId}
	GET /storage/fileStorage/containers?$filter=containerTypeId eq {containerTypeId}
	GET /storage/fileStorage/containers?$filter=containerTypeId eq {containerTypeId} and viewpoint/effectiveRole eq 'principalOwner'
	GET /storage/fileStorage/containers/{containerId}
	GET /storage/fileStorage/containers/{containerId}/columns
	GET /storage/fileStorage/containers/{containerId}/customProperties
	GET /storage/fileStorage/containers/{containerId}/customProperties/{propertyName}
	GET /storage/fileStorage/containers/{containerId}/drive
	GET /storage/fileStorage/containers/{containerId}/permissions
	GET /storage/fileStorage/containers/{containerId}/recycleBin/items
	GET /storage/fileStorage/deletedContainers?$filter=containerTypeId eq {containerTypeId}
	GET /storage/fileStorage/deletedContainers/{containerId}
	GET /storageContainers/{containerId}/columns/{column-id}
	PATCH /storage/fileStorage/containers/{containerId}
	PATCH /storage/fileStorage/containers/{containerId}/columns/{column-id}
	PATCH /storage/fileStorage/containers/{containerId}/customProperties
	PATCH /storage/fileStorage/containers/{containerId}/permissions/{permissionId}
	PATCH /storage/fileStorage/containers/{containerId}/recycleBin/settings
	POST /deletedStorageContainers/{containerId}/restore
	POST /storage/fileStorage/containers
	POST /storage/fileStorage/containers/{containerId}/activate
	POST /storage/fileStorage/containers/{containerId}/columns
	POST /storage/fileStorage/containers/{containerId}/lock
	POST /storage/fileStorage/containers/{containerId}/permanentDelete
	POST /storage/fileStorage/containers/{containerId}/permissions
	POST /storage/fileStorage/containers/{containerId}/recycleBin/items/delete
	POST /storage/fileStorage/containers/{containerId}/recycleBin/items/restore
	POST /storage/fileStorage/containers/{containerId}/unlock

	Commands
	Get-MgDrive

	Commands
	Get-MgBetaDrive

Resources

Granting this permission allows the calling application to access (and/or update) the following information in your tenant.

Graph reference: booleanColumn

Graph reference: drive

Property	Type	Description
createdBy	[identitySet][]	Identity of the user, device, or application which created the item. Read-only.
createdDateTime	dateTimeOffset	Date and time of item creation. Read-only.
description	String	Provide a user-visible description of the drive. Read-write.
driveType	String	Describes the type of drive represented by this resource. OneDrive personal drives return `personal`. OneDrive for Business returns `business`. SharePoint document libraries return `documentLibrary`. Read-only.
id	String	The unique identifier of the drive. Read-only.
lastModifiedBy	[identitySet][]	Identity of the user, device, and application which last modified the item. Read-only.
lastModifiedDateTime	dateTimeOffset	Date and time the item was last modified. Read-only.
name	string	The name of the item. Read-write.
owner	identitySet	Optional. The user account that owns the drive. Read-only.
quota	quota	Optional. Information about the drive's storage space quota. Read-only.
sharepointIds	[sharepointIds][]	Returns identifiers useful for SharePoint REST compatibility. Read-only. This property isn't returned by default and must be selected using the `$select` query parameter.
system	[systemFacet][]	If present, indicates that it's a system-managed drive. Read-only.
webUrl	string (url)	URL that displays the resource in the browser. Read-only.

Graph reference: fileStorageContainer

Property	Type	Description
containerTypeId	Guid	Container type ID of the fileStorageContainer. For details about container types, see Container Types. Each container must have only one container type. Read-only.
createdDateTime	DateTimeOffset	Date and time of the fileStorageContainer creation. Read-only.
customProperties	fileStorageContainerCustomPropertyDictionary	Custom property collection for the fileStorageContainer. Read-write.
description	String	Provides a user-visible description of the fileStorageContainer. Read-write.
displayName	String	The display name of the fileStorageContainer. Read-write.
id	String	The unique stable identifier of the filerStorageContainer. Read-only.
status	fileStorageContainerStatus	Status of the fileStorageContainer. Containers are created as inactive and require activation. Inactive containers are subjected to automatic deletion in 24 hours. The possible values are: `inactive` , `active` . Read-only.
viewpoint	fileStorageContainerViewpoint	Data specific to the current user. Read-only.
settings	fileStorageContainerSettings	Settings associated with a **f

Graph reference: fileStorageContainerCustomPropertyValue

Property	Type	Description
isSearchable	Boolean	Indicates whether the custom property is searchable. Optional. The default value is `false`.
value	String	Value of the custom property. Required.

Graph reference: fileStorageContainerSettings

Property	Type	Description
isOcrEnabled	Boolean	Indicates whether Optical Character Recognition (OCR) is enabled for the container. The default value is `false`. When set to `true`, OCR extraction is performed for new and updated documents of supported document types, and the extracted fields in the metadata of the document enable end-user search and search-driven solutions. When set to `false`, existing OCR metadata is not impacted. Optional. Read-write.

Property	Type	Description
isPicture	Boolean	Specifies whether the display format used for URL columns is an image or a hyperlink.

Graph reference: Permission

Property	Type	Description
expirationDateTime	DateTimeOffset	A format of yyyy-MM-ddTHH:mm:ssZ of DateTimeOffset indicates the expiration time of the permission. DateTime.MinValue indicates there's no expiration set for this permission. Optional.
id	String	The unique identifier of the permission among all permissions on the item. Read-only.
hasPassword	Boolean	Indicates whether the password is set for this permission. This property only appears in the response. Optional. Read-only. For OneDrive Personal only..
grantedTo (deprecated)	IdentitySet	For user type permissions, the details of the users and applications for this permission. Read-only.
grantedToIdentities (deprecated)	Collection(IdentitySet)	For type permissions, the details of the users to whom permission was granted. Read-only.
grantedToIdentitiesV2	Collection([SharePointIdentitySet][])	For link type permissions, the details of the users to whom permission was granted. Read-only.
grantedToV2	[SharePointIdentitySet][]	For user type permissions, the details of the users and applications for this permission. Read-only.
inheritedFrom	ItemReference	Provides a reference to the ancestor of the current permission, if it's inherited from an ancestor. Read-only.
invitation	[SharingInvitation][]	Details of any associated sharing invitation for this permission. Read-only.
link	[SharingLink][]	Provides the link details of the current permission, if it's a link type permission. Read-only.
roles	Collection of String	The type of permission, for example, `read`. See below for the full list of roles. Read-only.
shareId	String	A unique token that can be used to access this shared item via the shares API. Read-only.

Graph reference: recycleBin

Property	Type	Description
id	String	The unique identifier for the recycleBin object. Returned only on `$select`. Inherited from baseItem.
settings	recycleBinSettings	Settings of the recycleBin.

Graph reference: recycleBinItem

Property	Type	Description
deletedDateTime	DateTimeOffset	Date and time when the item was deleted. The timestamp type represents date and time information using ISO 8601 format and is always in UTC. For example, midnight UTC on Jan 1, 2014 is `2014-01-01T00:00:00Z`.
deletedFromLocation	String	Relative URL of the list or folder that originally contained the item.
id	String	Unique identifier of the delete transaction. Inherited from baseItem.
name	String	Name of the item. Inherited from baseItem.
size	Int64	Size of the item in bytes.

Graph reference: recycleBinSettings

Property	Type	Description
retentionPeriodOverrideDays	Int32	Recycle bin retention period override in days for deleted content. The default value is `93`; the value range is `7` to `180` inclusively. The setting applies to newly deleted content only. Setting this property to `null` reverts to its default value. Read-write.

Graph reference: sharePointIdentitySet

Property	Type	Description
application	[identity][]	The application associated with this action. Optional.
device	[identity][]	The device associated with this action. Optional.
group	[identity][]	The group associated with this action. Optional.
user	[identity][]	The user associated with this action. Optional.
siteGroup	[sharePointIdentity][]	The SharePoint group associated with this action. Optional.
siteUser	[sharePointIdentity][]	The SharePoint user associated with this action. Optional.

Table of Contents

FileStorageContainer.Selected

Graph Methods

Resources