FileStorageContainer.Manage.All
Export JSON
Export CSV
Copy URL
Print
Delegated
Full Control
All Resources
Allows the application to utilize the file storage container administration capabilities on behalf of an administrator user.
Delegated Access
App-Only Access
Permission Details
Delegated Permission
Admin consent required
Manage all file storage containers
Allows the application to utilize the file storage container administration capabilities on behalf of an administrator user.
User sees: Allows the application to utilize the file storage container administration capabilities on behalf of an administrator user.
Permission ID:
527b6d64-cdf5-4b8b-b336-4aa0b8ca2ce5
Properties
| Property | Type | Description |
|---|---|---|
id |
string |
The unique identifier for an entity. Read-only. |
viewpoint |
object |
Data specific to the current user. Read-only. |
description |
stringNullable |
Provides a user-visible description of the fileStorageContainer. Read-write. |
recycleBin |
object |
Recycle bin of the fileStorageContainer. Read-only. |
owners |
microsoft.graph.userIdentity collection |
List of users who own the fileStorageContainer. Read-only. |
displayName |
string |
The display name of the fileStorageContainer. Read-write. |
permissions |
microsoft.graph.permission collection |
The set of permissions for users in the fileStorageContainer. The permission for each user is set by the roles property. The possible values are reader, writer, manager, and owner. Read-write. |
migrationJobs |
microsoft.graph.sharePointMigrationJob collection |
The collection of sharePointMigrationJob objects local to the container. Read-write. |
sharePointGroups |
microsoft.graph.sharePointGroup collection |
The collection of sharePointGroup objects local to the container. Read-write. |
informationBarrier |
object |
Information barrier of a fileStorageContainer. Read-write. |
createdDateTime |
date-time |
Date and time of the fileStorageContainer creation. Read-only. |
containerTypeId |
uuid |
Container type ID of the fileStorageContainer. Each container must have only one container type. Read-only. |
drive |
object |
The drive of the resource fileStorageContainer. Read-only. |
assignedSensitivityLabel |
object |
Sensitivity label assigned to the fileStorageContainer. Read-write. |
ownershipType |
object |
Ownership type of the fileStorageContainer. The possible values are: tenantOwned. Read-only. |
Showing 15 of 23 properties. View all on Microsoft Learn →
JSON Representation
JSON representation
{
"id": "String",
"viewpoint": "{...}",
"description": "String",
"recycleBin": "{...}",
"owners": "[...]",
"displayName": "String",
"permissions": "[...]",
"migrationJobs": "[...]",
"sharePointGroups": "[...]",
"informationBarrier": "{...}",
"createdDateTime": "String",
"containerTypeId": "uuid",
"drive": "{...}",
"assignedSensitivityLabel": "{...}",
"ownershipType": "{...}",
"lockState": "{...}",
"archivalDetails": "{...}",
"storageUsedInBytes": "Int32",
"customProperties": "{...}",
"columns": "[...]"
}
Graph Methods
Delegated access
App-only access
No PowerShell cmdlets available for this version.
No PowerShell cmdlets available for this version.
Code Examples
C# / .NET SDK
// Install: dotnet add package Microsoft.Graph
// Install: dotnet add package Azure.Identity
using Microsoft.Graph;
using Azure.Identity;
// Delegated permissions - interactive user sign-in
var scopes = new[] { "FileStorageContainer.Manage.All" };
var options = new InteractiveBrowserCredentialOptions
{
ClientId = "YOUR_CLIENT_ID",
TenantId = "YOUR_TENANT_ID",
RedirectUri = new Uri("http://localhost")
};
var credential = new InteractiveBrowserCredential(options);
var graphClient = new GraphServiceClient(credential, scopes);
// Example: GET /me
var result = await graphClient.Me.GetAsync();
Console.WriteLine($"User: {result?.DisplayName}");
JavaScript / TypeScript
// npm install @azure/msal-browser @microsoft/microsoft-graph-client
import { PublicClientApplication } from "@azure/msal-browser";
import { Client } from "@microsoft/microsoft-graph-client";
import { AuthCodeMSALBrowserAuthenticationProvider } from
"@microsoft/microsoft-graph-client/authProviders/authCodeMsalBrowser";
const msalConfig = {
auth: {
clientId: "YOUR_CLIENT_ID",
authority: "https://login.microsoftonline.com/YOUR_TENANT_ID"
}
};
const pca = new PublicClientApplication(msalConfig);
await pca.initialize();
// Delegated: Login with required scope
const loginResponse = await pca.loginPopup({
scopes: ["FileStorageContainer.Manage.All"]
});
const authProvider = new AuthCodeMSALBrowserAuthenticationProvider(pca, {
account: loginResponse.account,
scopes: ["FileStorageContainer.Manage.All"],
interactionType: "popup"
});
const graphClient = Client.initWithMiddleware({ authProvider });
// Example: GET /me
const result = await graphClient.api("/me").get();
console.log(result);
PowerShell
# Install Microsoft Graph PowerShell module
Install-Module Microsoft.Graph -Scope CurrentUser
# Delegated access - interactive sign-in
Connect-MgGraph -Scopes "FileStorageContainer.Manage.All"
# Verify connection
Get-MgContext | Select-Object Account, TenantId, Scopes
# Example: GET /me
$result = Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/me"
$result | ConvertTo-Json -Depth 5
# Always disconnect when done
Disconnect-MgGraph
Python
# pip install msgraph-sdk azure-identity
from azure.identity import InteractiveBrowserCredential, ClientSecretCredential
from msgraph import GraphServiceClient
import asyncio
# Delegated permissions - interactive browser sign-in
credential = InteractiveBrowserCredential(
client_id="YOUR_CLIENT_ID",
tenant_id="YOUR_TENANT_ID"
)
scopes = ["FileStorageContainer.Manage.All"]
client = GraphServiceClient(credential, scopes)
async def get_data():
# Example: GET /me
result = await client.me.get()
print(f"User: {result.display_name}")
return result
asyncio.run(get_data())
App Registration
1
Navigate to Azure Portal
Go to App registrations in Microsoft Entra admin center
2
Add API Permission
Select your app → API permissions → Add a permission → Microsoft Graph
3
Select Permission Type
Choose Delegated permissions and search for FileStorageContainer.Manage.All
4
Grant Admin Consent
This permission requires admin consent. Grant consent in the Azure portal.