Granting Per-Site Permissions in SharePoint

Prev Next

Looking to connect your SharePoint?

Start here: Connecting SharePoint to GovEagle

If you chose the Sites.Selected permission approach in the Service Principal method, you'll need to manually grant your app registration access to each SharePoint site using Microsoft Graph Explorer. This is a one-time setup per site.

The following steps are intended for after you’ve completed Part 1: Create an App Registration in Azure and have selected the Sites.Selected permission.

Step 1: Log into Graph Explorer as a Tenant Admin

Navigate to Microsoft Graph Explorer and sign in with a tenant admin account.

Step 2: Grant Graph Explorer the Required Permissions

Before you can grant site-level permissions, Graph Explorer itself needs the Sites.FullControl.All permission.

  1. In Graph Explorer, click Modify Permissions.

Graph Explorer interface showing API request options and highlighted permissions modification section.

  1. Find and consent to Sites.FullControl.All.

Microsoft Graph API permissions list with consent status and filter options displayed.

  1. This is a one-time admin setup action. Once you've completed the permission grants below, you can revoke this consent from Graph Explorer if you'd like — the permissions you grant to your app will persist.

Step 3: Get the SharePoint Site ID

If you don't already know your site ID, run the following GET request in Graph Explorer:

GET https://graph.microsoft.com/v1.0/sites/{YOUR-DOMAIN}.sharepoint.com:/sites/{YOUR-SITE-NAME}

Copy the id value from the response.

Step 4: Grant Your App Access to the Site

  1. In Graph Explorer, switch to a POST request.

  2. Set the URL to:

POST https://graph.microsoft.com/v1.0/sites/{site-id-from-step-3}/permissions
  1. Use the following request body. Use "read" for read-only access, or ["read", "write"] if write access is needed:

{
  "roles": ["read"],
  "grantedToIdentities": [
    {
      "application": {
        "id": "<your-azure-app-client-id>",
        "displayName": "GovEagle SharePoint Integration"
      }
    }
  ]
}
  1. Click Run Query and verify the API call was successful.

  2. The site should appear in the GovEagle platform within a few minutes.

Repeat Steps 3–4 for each additional SharePoint site you want to connect.