Skip to content

Grant a user read or write access to a SharePoint site.

Permissions

Requires delegated permission Sites.ReadWrite.All.

Reference

View source

import argparse

from office365.graph_client import GraphClient
from tests.settings import client_id, password, tenant, username


def main():
    parser = argparse.ArgumentParser(description="Grant a user read or write access to a SharePoint site")
    parser.add_argument("--site-url", required=True, help="Site URL")
    parser.add_argument("--user-email", required=True, help="User email to grant access")
    parser.add_argument("--role", required=True, help="Role (read/write)")
    args = parser.parse_args()

    client = GraphClient(tenant=tenant).with_username_and_password(client_id, username, password)

    site_url = args.site_url.strip()
    user_email = args.user_email.strip()
    role = args.role.strip().lower()

    site = client.sites.get_by_url(site_url).execute_query()
    user = client.users.find_by_mail(user_email).execute_query()
    if not user.is_loaded:
        print(f"User '{user_email}' not found.")
        return

    site.permissions.add(roles=[role], identity=user).execute_query()
    print(f"Granted '{role}' on {site.display_name} to {user_email}")


if __name__ == "__main__":
    main()

← Back to SharePoint sites