ESC
Type to search...

FileStorageContainer.Manage.All

Export JSON
Export CSV
Copy URL
Print
Delegated Full Control All Resources

Allows the application to utilize the file storage container administration capabilities on behalf of an administrator user.

Permission data: April 6, 2026 at 4:06 AM UTC
Delegated Access App-Only Access

Permission Details

Delegated Permission Admin consent required

Manage all file storage containers

Allows the application to utilize the file storage container administration capabilities on behalf of an administrator user.

Properties

Microsoft Graph v1.0 exact-category-docs

Properties is shown from stable Microsoft Graph v1.0 metadata.

Property Type Description
assignedSensitivityLabel assignedLabel Sensitivity label assigned to the fileStorageContainer. Read-write.
containerTypeId Guid Container type ID of the fileStorageContainer. For details about container types, see Container Types. Each container must have only one container type. Read-only.
createdDateTime DateTimeOffset Date and time of the fileStorageContainer creation. Read-only.
customProperties fileStorageContainerCustomPropertyDictionary Custom property collection for the fileStorageContainer. Read-write.
description StringNullable Provides a user-visible description of the fileStorageContainer. Read-write.
displayName String The display name of the fileStorageContainer. Read-write.
id String The unique stable identifier of the filerStorageContainer. Read-only.
lockState siteLockState Indicates the lock state of the fileStorageContainer. The possible values are unlocked and lockedReadOnly. Read-only.
settings fileStorageContainerSettings Settings associated with a fileStorageContainer. Read-write.
status fileStorageContainerStatus Status of the fileStorageContainer. Containers are created as inactive and require activation. Inactive containers are subjected to automatic deletion in 24 hours. The possible values are: inactive , active . Read-only.
viewpoint fileStorageContainerViewpoint Data specific to the current user. Read-only.
columns columnDefinition collection The set of custom structured metadata supported by the fileStorageContainer. Read-write.
drive object The drive of the resource fileStorageContainer. Read-only.
migrationJobs sharePointMigrationJob collection The collection of sharePointMigrationJob objects local to the container. Read-write.
permissions permission collection The set of permissions for users in the fileStorageContainer. Permission for each user is set by the roles property. The possible values are: reader, writer, manager, and owner. Read-write.

Showing 15 of 16 properties.

JSON Representation

Microsoft Graph v1.0 exact-category-docs

JSON representation is shown from stable Microsoft Graph v1.0 metadata.

JSON representation
{
  "@odata.type": "#microsoft.graph.fileStorageContainer",
  "id": "String (identifier)",
  "displayName": "String",
  "description": "String",
  "containerTypeId": "Guid",
  "assignedSensitivityLabel": {
    "@odata.type": "microsoft.graph.assignedLabel"
  },
  "customProperties": {
    "@odata.type": "microsoft.graph.fileStorageContainerCustomPropertyDictionary"
  },
  "viewpoint": {
    "@odata.type": "microsoft.graph.fileStorageContainerViewpoint"
  },
  "status": "String",
  "createdDateTime": "String (timestamp)",
  "settings": {
    "@odata.type": "microsoft.graph.fileStorageContainerSettings"
  }
}

Relationships

Microsoft Graph v1.0 exact-category-docs

Relationships is shown from stable Microsoft Graph v1.0 metadata.

Relationship Type Description
columns columnDefinition collection The set of custom structured metadata supported by the fileStorageContainer. Read-write.
drive drive The drive of the resource fileStorageContainer. Read-only.
permissions permission collection The set of permissions for users in the fileStorageContainer. Permission for each user is set by the roles property. The possible values are: reader, writer, manager, and owner. Read-write.
recycleBin recycleBin Recycle bin of the fileStorageContainer. Read-only.
migrationJobs sharePointMigrationJob collection The collection of sharePointMigrationJob objects local to the container. Read-write.
containerTypeId uuid Container type ID of the fileStorageContainer. For details about container types, see Container Types. Each container must have only one container type. Read-only.
settings fileStorageContainerSettings Related settings data exposed by this resource.
externalGroupId uuid Related externalGroupId data exposed by this resource.
owners userIdentity collection List of users who own the fileStorageContainer. Read-only.
sharePointGroups sharePointGroup collection The collection of sharePointGroup objects local to the container. Read-write.

Graph Methods

Delegated access App-only access
Exact Microsoft Learn match

Microsoft Graph v1.0 endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /storage/fileStorage/containers?$filter=containerTypeId eq {containerTypeId}
GET /storage/fileStorage/containers?$filter=containerTypeId eq {containerTypeId} and viewpoint/effectiveRole eq 'principalOwner'
GET /storage/fileStorage/containers/{containerId}
GET /storage/fileStorage/containers/{containerId}/permissions
GET /storage/fileStorage/deletedContainers?$filter=containerTypeId eq {containerTypeId}
POST /storage/fileStorage/containers/{containerId}/lock
POST /storage/fileStorage/containers/{containerId}/permanentDelete
POST /storage/fileStorage/containers/{containerId}/permissions
POST /storage/fileStorage/containers/{containerId}/unlock
POST /storage/fileStorage/deletedContainers/{containerId}/restore
PATCH /storage/fileStorage/containers/{containerId}
PATCH /storage/fileStorage/containers/{containerId}/permissions/{permissionId}
DELETE /storage/fileStorage/containers/{containerId}
DELETE /storage/fileStorage/containers/{containerId}/permissions/{permissionId}
DELETE /storage/fileStorage/deletedContainers/{containerId}
Exact Microsoft Learn match

Microsoft Graph beta endpoints are mapped directly from refreshed Microsoft Learn permissions tables.

Methods
GET /storage/fileStorage/containers?$filter=containerTypeId eq {containerTypeId}
GET /storage/fileStorage/containers?$filter=containerTypeId eq {containerTypeId} and viewpoint/effectiveRole eq 'principalOwner'
GET /storage/fileStorage/containers/{containerId}
GET /storage/fileStorage/containers/{containerId}/permissions
GET /storage/fileStorage/deletedContainers?$filter=containerTypeId eq {containerTypeId}
GET /storage/fileStorage/deletedContainers/{containerId}
POST /storage/fileStorage/containers/{containerId}/archive
POST /storage/fileStorage/containers/{containerId}/lock
POST /storage/fileStorage/containers/{containerId}/permanentDelete
POST /storage/fileStorage/containers/{containerId}/permissions
POST /storage/fileStorage/containers/{containerId}/unarchive
POST /storage/fileStorage/containers/{containerId}/unlock
POST /storage/fileStorage/deletedContainers/{containerId}/restore
PATCH /storage/fileStorage/containers/{containerId}
PATCH /storage/fileStorage/containers/{containerId}/permissions/{permissionId}
DELETE /storage/fileStorage/containers/{containerId}
DELETE /storage/fileStorage/containers/{containerId}/permissions/{permissionId}
DELETE /storage/fileStorage/deletedContainers/{containerId}
No Microsoft Learn PowerShell mapping available

Microsoft Graph PowerShell v1.0 commands are not available from refreshed Microsoft Learn PowerShell snippets for this permission.

No deterministic PowerShell command map is available for this permission.

Browse PowerShell docs
No Microsoft Learn PowerShell mapping available

Microsoft Graph PowerShell beta commands are not available from refreshed Microsoft Learn PowerShell snippets for this permission.

No deterministic PowerShell command map is available for this permission.

Browse PowerShell docs

Code Examples

C# / .NET SDK
Create fileStorageContainer permission
// Code snippets are only available for the latest version. Current version is 5.x

// Dependencies
using Microsoft.Graph.Models;

var requestBody = new Permission
{
	Roles = new List<string>
	{
		"reader",
	},
	GrantedToV2 = new SharePointIdentitySet
	{
		User = new Identity
		{
			AdditionalData = new Dictionary<string, object>
			{
				{
					"userPrincipalName" , "[email protected]"
				},
			},
		},
	},
};

// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Storage.FileStorage.Containers["{fileStorageContainer-id}"].Permissions.PostAsync(requestBody);
JavaScript
Create fileStorageContainer permission
const options = {
	authProvider,
};

const client = Client.init(options);

const permission = {
  roles: ['reader'],
  grantedToV2: {
    user: {
      userPrincipalName: '[email protected]'
    }
  }
};

await client.api('/storage/fileStorage/containers/b!ISJs1WRro0y0EWgkUYcktDa0mE8zSlFEqFzqRn70Zwp1CEtDEBZgQICPkRbil_5Z/permissions')
	.post(permission);
PowerShell
Connect-MgGraph -Scopes "FileStorageContainer.Manage.All"
Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/storage/fileStorage/containers?$filter=containerTypeId eq {id}"
Python
Create fileStorageContainer permission
# Code snippets are only available for the latest version. Current version is 1.x
from msgraph import GraphServiceClient
from msgraph.generated.models.permission import Permission
from msgraph.generated.models.share_point_identity_set import SharePointIdentitySet
from msgraph.generated.models.identity import Identity
# To initialize your graph_client, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=python
request_body = Permission(
	roles = [
		"reader",
	],
	granted_to_v2 = SharePointIdentitySet(
		user = Identity(
			additional_data = {
					"user_principal_name" : "[email protected]",
			}
		),
	),
)

result = await graph_client.storage.file_storage.containers.by_file_storage_container_id('fileStorageContainer-id').permissions.post(request_body)

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Delegated permissions and search for FileStorageContainer.Manage.All

4

Grant Admin Consent

This delegated permission requires admin consent.