Grant a user read or write access to a SharePoint site.

Permissions

Requires delegated permission Sites.ReadWrite.All.

Reference

• https://learn.microsoft.com/en-us/graph/api/site-post-permissions

View source

import argparse

from office365.graph_client import GraphClient
from tests.settings import client_id, password, tenant, username


def main():
    parser = argparse.ArgumentParser(description="Grant a user read or write access to a SharePoint site")
    parser.add_argument("--site-url", required=True, help="Site URL")
    parser.add_argument("--user-email", required=True, help="User email to grant access")
    parser.add_argument("--role", required=True, help="Role (read/write)")
    args = parser.parse_args()

    client = GraphClient(tenant=tenant).with_username_and_password(client_id, username, password)

    site_url = args.site_url.strip()
    user_email = args.user_email.strip()
    role = args.role.strip().lower()

    site = client.sites.get_by_url(site_url).get().execute_query()
    users = client.users.filter(f"mail eq '{user_email}'").get().execute_query()
    if not users:
        print(f"User '{user_email}' not found.")
        return

    site.permissions.add(roles=[role], identity=users[0]).execute_query()
    print(f"Granted '{role}' on {site.display_name} to {user_email}")


if __name__ == "__main__":
    main()

---

← Back to OneDrive / SharePoint v2 — Sites