Microsoft_Graph_Files

Use the O365 File Management (Onedrive/Sharepoint/Teams) integration to enable your app to get authorized access to files in OneDrive, SharePoint, and MS Teams across your entire organization. This integration requires admin consent.

Category

Email

Pack

MicrosoftGraphFiles

Configuration parameters

• host — Server URL (required)
• auth_id — Application ID / Client ID
• credentials_auth_id —
• tenant_id — Token / Tenant ID
• credentials_tenant_id —
• enc_key — Key / Client Secret
• credentials_enc_key —
• redirect_uri — Application redirect URI (for Self Deployed - Authorization Code Flow)
• auth_code_creds —
• certificate_thumbprint — Certificate Thumbprint
• credentials_certificate_thumbprint —
• private_key — Private Key
• self_deployed — Use a self-deployed Azure Application
• use_managed_identities — Use Azure Managed Identities
• managed_identities_client_id —
• insecure — Trust any certificate (not secure)
• proxy — Use system proxy settings

Commands (24)

• msgraph-assign-sensitivity-label — Assigns a sensitivity label to a drive item. Microsoft Graph treats this call as a long-running operation and returns the operation status URL in the Location response header; poll that URL to track completion. HTTP error responses from Microsoft Graph are surfaced verbatim as a command error.
• msgraph-create-new-folder — Creates a new folder in a drive with the specified parent item or path.
• msgraph-create-site-permissions — Create a new application permission for a site.
• msgraph-delete-file — Deletes an item from OneDrive.
• msgraph-delete-site-permissions — Deletes an app permission from a site.
• msgraph-download-file — Downloads the file contents of the drive item.
• msgraph-driveitem-activities-list — Retrieves the recent activities that took place on a file or folder (driveItem), such as who accessed it and when. Activities are stored against the SharePoint list representation of the item, so the command first resolves the item's SharePoint list identifiers and then reads the activities from the list item. This resolution is internal - only site_id and item_id are needed. Note: Activity data is not available in all national deployments and is not supported for personal Microsoft accounts. When no activity has been recorded for the item, Microsoft Graph returns an empty result rather than an error.
• msgraph-driveitem-analytics-get — Retrieves activity statistics for a file or folder (driveItem), such as how many times it was viewed and by how many people. Analytics are stored against the SharePoint list representation of the item, so the command first resolves the item's SharePoint list identifiers and then reads the analytics from the list item. This resolution is internal - only site_id and item_id are needed. Note: Analytics data is not available in all national deployments and is not supported for personal Microsoft accounts. When no analytics data has been collected for the item, Microsoft Graph returns an empty result rather than an error.
• msgraph-driveitem-copy — Initiates an asynchronous copy of a driveItem (file or folder) within or across drives. Microsoft Graph processes the copy asynchronously and responds 202 Accepted with a monitor URL. Poll the returned MonitorUrl directly against Microsoft Graph (using the same access token) until the body reports status `completed` or `failed`.
• msgraph-driveitem-metadata-get — Retrieves the metadata of a file or folder (driveItem). The item can be addressed by ID, by path relative to the drive root, or by a sharing URL. Exactly one of item_id, item_path, or share_url must be provided. The returned ItemID is scoped to the drive that stores the item, which is returned as DriveId. A sharing URL that points to a personal file resolves against that user's OneDrive, so the ItemID it returns differs from the ID the same file has under a SharePoint site library. Note: addressing the item by share_url requires the Files.ReadWrite.All application permission (or Files.ReadWrite delegated), which is higher than the Files.Read.All required by the item_id and item_path options, even though this command only reads data.
• msgraph-driveitem-permission-delete — Deletes (revokes) a single sharing permission from a driveItem. Returns success when Microsoft Graph responds 204. For bulk-delete loops where intermittent 404s (already removed) are acceptable, enable "Continue on error" on the calling task.
• msgraph-driveitem-permissions-list — Lists the sharing permissions on a driveItem. Returns both link-style permissions (anyone-with-link, organization-wide-link, scoped link) and direct grants (per-user / per-group / per-application). The InheritedFrom field is non-null when the permission is inherited from a parent folder.
• msgraph-driveitem-update — Updates a driveItem (move within or across drives, rename, or update metadata) by issuing PATCH on the driveItem. At least one of new_parent_id, new_parent_drive_id, new_name, description, or conflict_behavior must be provided.
• msgraph-files-auth-reset — Run this command if for some reason you need to rerun the authentication process.
• msgraph-files-auth-test — Tests connectivity to Microsoft.
• msgraph-files-generate-login-url — Generate the login URL used for Authorization code flow.
• msgraph-get-sensitivity-label — Retrieves the sensitivity label currently assigned to a drive item. Returns the label ID, display name, and protection state regardless of whether the label has encryption enabled.
• msgraph-list-drive-content — Returns a list of files and folders in the specified drive.
• msgraph-list-drives-in-site — Returns the list of document libraries (drives) available for a target site.
• msgraph-list-sharepoint-sites — Returns a list of the tenant sites. This command requires the 'Sites.Read.All' permission.
• msgraph-list-site-permissions — List of apps with permissions for the site. if permission_id is provided, it will return the details of that permission.
• msgraph-replace-existing-file — Replaces the content of the file in the specified MS Graph resource.
• msgraph-update-site-permissions — Updates an existing permission for a site.
• msgraph-upload-new-file — Uploads a file from Cortex XSOAR to the specified MS Graph resource.