How to get/list my SharePoint site with the "Sites" APIs and then manage its storage library with the "Files" APIs

[Luca (LuchiLucs)]

Hi,

I need some help understanding how can I manage the storage library of my SharePoint site.
Given I have the URL of my site as "https://mycompanyname.sharepoint.com/sites/mysitename"

So far I tried, without success:

import os
import jwt
from typing import Optional, Literal
from azure.identity.aio import ClientSecretCredential
from msgraph import GraphServiceClient
from msgraph.generated.models.drive_item import DriveItem
from msgraph.generated.models.folder import Folder
from msgraph.generated.drives.item.items.item.content.content_request_builder import ContentRequestBuilder
from kiota_abstractions.base_request_configuration import RequestConfiguration
from msgraph.generated.models.o_data_errors.o_data_error import ODataError
from src.config.loader import CONFIG
import aiofiles
from src.utils.logger import get_logger

logger = get_logger(CONFIG.logging.name, CONFIG.logging.level)

class GraphClientSingleton():
    _client = None
    _credentials = None

    @classmethod
    def get_client(cls):
        if cls._client is None:
            # cls._authority = 'login.microsoftonline.com'
            cls._credentials = ClientSecretCredential(
                tenant_id = CONFIG.msgraph.tenant_id_sharepoint,
                client_id = CONFIG.msgraph.client_id_sharepoint,
                client_secret = CONFIG.msgraph.client_secret_sharepoint,
            )
            cls._scopes = ['https://graph.microsoft.com/.default']

            cls._client = GraphServiceClient(credentials=cls._credentials, scopes=cls._scopes)
        return cls._client

    @classmethod
    async def decode_token(cls):
        token = await cls.get_access_token()
        decoded_token = jwt.decode(token, options={"verify_signature": False})
        return decoded_token

    @classmethod
    async def get_access_token(cls):
        if cls._credentials is None:
            cls.get_client()
        
        token = await cls._credentials.get_token(*cls._scopes)
        return token.token
    
class SharePointDAO:
    def __init__(self):
        self.client = GraphClientSingleton.get_client()
        
if __name__ == "__main__":
    async def test_api():
        token = await GraphClientSingleton.decode_token()
        sp_dao = SharePointDAO()
        # Example 1
        from msgraph.generated.sites.sites_request_builder import SitesRequestBuilder
        from kiota_abstractions.base_request_configuration import RequestConfiguration
        # To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
        query_params = SitesRequestBuilder.SitesRequestBuilderGetQueryParameters(
            select = ["siteCollection", "webUrl"],
            filter = "siteCollection/root ne null",
        )
        request_configuration = RequestConfiguration(
            query_parameters = query_params,
        )
        sites = await sp_dao.client.sites.get(request_configuration = request_configuration)
        # Example 2 (not sure how to map the "real" URL with the needed url here)
        site_request_builder = sp_dao.client.sites.with_url(
            "https://graph.microsoft.com/v1.0/sites/mycompanyname.sharepoint.com:/mysitename"
        )
        site = await site_request_builder.get()
        # Example 3 (return empty list under "value")
        sites = await sp_dao.client.sites.get()
        # Example 4 (return 403 error "Access Denied")
        sites = await sp_dao.client.sites.get_all_sites.get()
        logger.info(sites)
    import asyncio
    asyncio.run(test_api())

[Acurisu]

As mentioned in my comment on your issue (#1041 (comment)) you can access the site using the path e.g.

await graph_client.sites.by_site_id('root:/sites/mysitename:').get()

[Luca (LuchiLucs)]

Acurisu Thanks for your reply. I resolved the issue by getting the ID metadata of the Site using the REST HTTP API directly with the developer test client of Microsoft, then querying by this ID.

Can I ask if you know which role/permission is needed by this API? I'm asking you this because the Python SDK documentation lacks the granual details of these roles and the least permission often is the visibility of all sites of the tenant. On my project I have the Selected Site permission which is not listed in the Python SDK. Thanks

[Acurisu]

Sites.Selected does suffice for this as it is the same call as if you were to put the ID there. Of course with Sites.Selected I assume that you have previously explicitly granted the application permission for that site using e.g. the Powershell SDK's New-MgSitePermission (currently it is not possible to do that via the Rest Graph API).