Remove a specific permission (user/group) from a SharePoint site.

Permissions

Requires delegated permission Sites.ReadWrite.All.

Reference

• https://learn.microsoft.com/en-us/graph/api/site-delete-permission

View source

import argparse

from office365.graph_client import GraphClient
from tests.settings import client_id, password, tenant, username


def main():
    parser = argparse.ArgumentParser(description="Remove a specific permission (user/group) from a SharePoint site")
    parser.add_argument("--site-url", required=True, help="Site URL")
    parser.add_argument("--permission-id", required=True, help="Permission ID to remove")
    args = parser.parse_args()

    client = GraphClient(tenant=tenant).with_username_and_password(client_id, username, password)

    site_url = args.site_url.strip()
    site = client.sites.get_by_url(site_url).get().execute_query()

    permissions = site.permissions.get().execute_query()
    print(f"Permissions on {site.display_name}:")
    for p in permissions:
        print(f"  {p.id}  roles={p.roles}")
    permission_id = args.permission_id.strip()

    site.permissions[permission_id].delete_object().execute_query()
    print(f"Permission {permission_id} removed from {site.display_name}.")


if __name__ == "__main__":
    main()

---

← Back to OneDrive / SharePoint v2 — Sites