Microsoft Graph “Sites.Selected” permissions within SharePoint Online

In this 18-minute developer focused demo, Pankaj Surti shows viewers how to access SharePoint resources using a headless account without granting full permissions site access. Learn about Access Control Service (ACES) and its retirement, using PowerShell and the new Sites.Selected MS Graph permission for granular site level access, and how to automate and govern the granular access of sites with the Sites Selected Request Tracker (SSRT) tool that triggers actins in Logic Apps. Step-by-step tool usage explained/shown herein. This PnP Community demo is taken from the Microsoft 365 & Power Platform Development Community call recorded on July 7, 2022.
Demo Presenter
• Pankaj Surti (Microsoft) | @pankajsurti
Supporting materials
• Article - How does the MS Graph “Sites.Selected” permission work for granular permissions for SPO sites? | pankajsurti.co...
• Article - How to automate and govern the “Sites.Selected” permissions using a custom tool? | pankajsurti.co...
• Article - Controlling app access on a specific SharePoint site collections is now available in Microsoft Graph | devblogs.micro...
Learn more
• Microsoft 365 Unified Sample gallery - aka.ms/m365/sa...
• Microsoft 365 Platform Community in UA-cam - aka.ms/m365/vi...
• Microsoft 365 Platform Community - aka.ms/m365/com...

[@carlselrahc4163]

This is the best presentation I found, perhaps the only one that works for Microsoft Graph "Sites.Selected". Do you have a Csharp program application that does the same Sites.Selected permission for Microsoft Graph to access and write SharePoint? Thank you for sharing!

[@vinaydeep557]

this is one of the excellent and detailed one and more comprehensive.

[@VeganSmasher]

That was an amazing demo!🤩

[@MicrosoftCommunityLearning]

Yes it was!

[@rakeshbhavsar2398]

Excellent demonstration. If I want to map SharePoint Site Collection to Azure AD Site.Selected (MS Graph) api permission, then what are the exact steps and who need to perform those SharePoint Admin or Azure Admin. Please suggest

[@Jaikambhampti]

I want to write to sharepoint document library ex Documents. Sites.selected in sharepoint is giving me 401 Unauthorized. Any workaround here?