Files.ReadWrite.AppFolder | Graph Permissions

Permission Details

Application Permission

Have full access to the application's folder without a signed in user.

Allows the app to read, create, update and delete files in the application's folder without a signed in user.

Permission ID: b47b160b-1054-4efd-9ca0-e2f614696086

Delegated Permission

Have full access to the application's folder (preview)

(Preview) Allows the app to read, create, update and delete files in the application's folder.

Permission ID: 8019c312-3263-48e6-825e-2b833497195b

Properties

Microsoft Graph v1.0 mapped-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property	Type	Description
`audio`	`[audio][]`	Audio metadata, if the item is an audio file. Read-only. Read-only. Only on OneDrive Personal.
`bundle`	`[bundle][]`	Bundle metadata, if the item is a bundle. Read-only.
`content`	`Stream`Nullable	The content stream, if the item represents a file.
`createdBy`	`[identitySet][]`	Identity of the user, device, and application that created the item. Read-only.
`createdDateTime`	`DateTimeOffset`	Date and time of item creation. Read-only.
`cTag`	`String`Nullable	An eTag for the content of the item. This eTag isn't changed if only the metadata is changed. Note This property isn't returned if the item is a folder. Read-only.
`deleted`	`[deleted][]`	Information about the deleted state of the item. Read-only.
`description`	`String`Nullable	Provides a user-visible description of the item. Read-write. Only on OneDrive Personal.
`eTag`	`String`Nullable	eTag for the entire item (metadata + content). Read-only.
`file`	`[file][]`	File metadata, if the item is a file. Read-only.
`fileSystemInfo`	`[fileSystemInfo][]`	File system information on client. Read-write.
`folder`	`[folder][]`	Folder metadata, if the item is a folder. Read-only.
`id`	`String`	The unique identifier of the item within the Drive. Read-only.
`image`	`[image][]`	Image metadata, if the item is an image. Read-only.
`lastModifiedBy`	`[identitySet][]`	Identity of the user, device, and application that last modified the item. Read-only.

Showing 15 of 45 properties.

JSON Representation

Microsoft Graph v1.0 mapped-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation

{
  "audio": { "@odata.type": "microsoft.graph.audio" },
  "bundle": { "@odata.type": "microsoft.graph.bundle" },
  "content": { "@odata.type": "Edm.Stream" },
  "cTag": "string (etag)",
  "deleted": { "@odata.type": "microsoft.graph.deleted"},
  "description": "string",
  "file": { "@odata.type": "microsoft.graph.file" },
  "fileSystemInfo": { "@odata.type": "microsoft.graph.fileSystemInfo" },
  "folder": { "@odata.type": "microsoft.graph.folder" },
  "image": { "@odata.type": "microsoft.graph.image" },
  "location": { "@odata.type": "microsoft.graph.geoCoordinates" },
  "malware": { "@odata.type": "microsoft.graph.malware" },
  "package": { "@odata.type": "microsoft.graph.package" },
  "pendingOperations": { "@odata.type": "microsoft.graph.pendingOperations" },
  "photo": { "@odata.type": "microsoft.graph.photo" },
  "publication": {"@odata.type": "microsoft.graph.publicationFacet"},
  "remoteItem": { "@odata.type": "microsoft.graph.remoteItem" },
  "root": { "@odata.type": "microsoft.graph.root" },
  "searchResult": { "@odata.type": "microsoft.graph.searchResult" },
  "shared": { "@odata.type": "microsoft.graph.shared" },
  "sharepointIds": { "@odata.type": "microsoft.graph.sharepointIds" },
  "size": 1024,
  "specialFolder": { "@odata.type": "microsoft.graph.specialFolder" },
  "video": { "@odata.type": "microsoft.graph.video" },
  "webDavUrl": "string",

  /* relationships */
  "activities": [{"@odata.type": "microsoft.graph.itemActivity"}],
  "analytics": {"@odata.type": "microsoft.graph.itemAnalytics"},
  "children": [{ "@odata.type": "microsoft.graph.driveItem" }],
  "createdByUser": { "@odata.type": "microsoft.graph.user" },
  "retentionLabel": { "@odata.type": "microsoft.graph.itemRetentionLabel" },
  "lastModifiedByUser": { "@odata.type": "microsoft.graph.user" },
  "permissions": [ {"@odata.type": "microsoft.graph.permission"} ],
  "subscriptions": [ {"@odata.type": "microsoft.graph.subscription"} ],
  "thumbnails": [ {"@odata.type": "microsoft.graph.thumbnailSet"}],
  "versions": [ {"@odata.type": "microsoft.graph.driveItemVersion"}],

  /* inherited from baseItem */
  "createdBy": {"@odata.type": "microsoft.graph.identitySet"},
  "createdDateTime": "String (timestamp)",
  "eTag": "string",
  "id": "string (identifier)",
  "lastModifiedBy": {"@odata.type": "microsoft.graph.identitySet"},
  "lastModifiedDateTime": "String (timestamp)",
  "name": "string",
  "parentReference": {"@odata.type": "microsoft.graph.itemReference"},
  "webUrl": "string",

  /* instance annotations */
  "@microsoft.graph.conflictBehavior": "string",
  "@microsoft.graph.downloadUrl": "url",
  "@microsoft.graph.sourceUrl": "url"
}

Relationships

Microsoft Graph v1.0 mapped-docs

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship	Type	Description
`activities`	`[itemActivity][] collection`	The list of recent activities that took place on this item.
`analytics`	`[itemAnalytics][] resource`	Analytics about the view activities that took place on this item.
`children`	`driveItem collection`	Collection containing Item objects for the immediate children of Item. Only items representing folders have children. Read-only. Nullable.
`createdByUser`	`[user][]`	Identity of the user who created the item. Read-only.
`lastModifiedByUser`	`[user][]`	Identity of the user who last modified the item. Read-only.
`listItem`	`[listItem][]`	For drives in SharePoint, the associated document library list item. Read-only. Nullable.
`permissions`	`[permission][] collection`	The set of permissions for the item. Read-only. Nullable.
`retentionLabel`	`[itemRetentionLabel][]`	Information about retention label and settings enforced on the driveItem. Read-write.
`subscriptions`	`[subscription][] collection`	The set of subscriptions on the item. Only supported on the root of a drive.
`thumbnails`	`[thumbnailSet][] collection`	Collection of [thumbnailSet][] objects associated with the item. For more information, see [getting thumbnails][]. Read-only. Nullable.
`versions`	`[driveItemVersion][] collection`	The list of previous versions of the item. For more info, see [getting previous versions][]. Read-only. Nullable.
`workbook`	`[workbook][]`	For files that are Excel spreadsheets, access to the workbook API to work with the spreadsheet's contents. Nullable.
`photo`	`object`	Photo metadata, if the item is a photo. Read-only.
`extensions`	`extension collection`	The collection of open extensions defined for this item. Nullable.

Graph Methods

Delegated access App-only access

Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET `/me/drive/special/{name}`

Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET `/me/drive/special/{name}`
DELETE `/me/drive/items/{id}/workbook/names/{name}`
DELETE `/me/drive/items/{id}/workbook/worksheets/{id\|name}/names/{name}`
DELETE `/me/drive/root:/{item-path}:/workbook/names/{name}`
DELETE `/me/drive/root:/{item-path}:/workbook/worksheets/{id\|name}/names/{name}`

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell v1.0 commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
`Get-MgDriveSpecial` /me/drive/special/{name} Get a special folder by name

Exact Microsoft Learn PowerShell match

Microsoft Graph PowerShell beta commands are mapped directly from refreshed Microsoft Learn PowerShell snippets.

Commands
`Get-MgBetaDriveSpecial` /me/drive/special/{name} Get a special folder by name

Code Examples

C# / .NET SDK

Get a special folder by name

View official example on Microsoft Learn

// Code snippets are only available for the latest version. Current version is 5.x

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Drives["{drive-id}"].Special["{driveItem-id}"].GetAsync();

JavaScript

Get a special folder by name

View official example on Microsoft Learn

const options = {
	authProvider,
};

const client = Client.init(options);

let driveItem = await client.api('/me/drive/special/{name}')
	.get();

PowerShell

Get a special folder by name

View official example on Microsoft Learn

Import-Module Microsoft.Graph.Files

Get-MgDriveSpecial -DriveId $driveId -DriveItemId $driveItemId

Python

Get a special folder by name

View official example on Microsoft Learn

# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python

result = await graph_client.drives.by_drive_id('drive-id').special.by_drive_item_id('driveItem-id').get()

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions or delegated permissions and search for Files.ReadWrite.AppFolder

4

Grant Admin Consent

Application permissions always require admin consent.

Frequently asked questions

What is the Files.ReadWrite.AppFolder Microsoft Graph permission?

Files.ReadWrite.AppFolder is available as both an application permission and a delegated permission in the Microsoft Graph API, grouped under the Files category. Allows the app to read, create, update and delete files in the application's folder without a signed in user. It grants read and write access to resources. Application permissions always require admin consent. It is mapped to the Microsoft Graph driveitem resource type. 6 documented Microsoft Graph REST methods require it. 2 Microsoft Graph PowerShell commands are documented for it.

Is Files.ReadWrite.AppFolder an application or a delegated permission?

Files.ReadWrite.AppFolder is available as both an application permission (app-only access, no signed-in user) and a delegated permission (access on behalf of a signed-in user).

Does Files.ReadWrite.AppFolder require admin consent?

Application permissions always require admin consent.

What is the permission ID (GUID) for Files.ReadWrite.AppFolder?

For Files.ReadWrite.AppFolder, the application (app role) ID is b47b160b-1054-4efd-9ca0-e2f614696086, and the delegated (OAuth2 scope) ID is 8019c312-3263-48e6-825e-2b833497195b. These are the real Microsoft Graph identifiers and can be used directly in an app registration manifest.