Skip to content

Added minimal permission for 'spo file related' commands. Closes #7270 #7409

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Adam-it merged 2 commits into from
Jul 15, 2026
Merged

Added minimal permission for 'spo file related' commands. Closes #7270 #7409

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
f1c0947
minimal permission
SmitaNachan Jun 18, 2026
2898476
Update docs/docs/cmd/spo/file/file-sharinginfo-get.mdx
Adam-it Jul 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions docs/docs/cmd/spo/file/file-checkout-undo.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,6 @@
import Global from '../../_global.mdx';
import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';

# spo file checkout undo

Expand Down Expand Up @@ -28,6 +30,25 @@ m365 spo file checkout undo [options]

<Global />

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|------------|----------------|
| SharePoint | AllSites.Write |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|------------|---------------------|
| SharePoint | Sites.ReadWrite.All |

</TabItem>
</Tabs>

## Examples

Discards a checked-out file with a specific ID.
Expand Down
21 changes: 21 additions & 0 deletions docs/docs/cmd/spo/file/file-retentionlabel-ensure.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,6 @@
import Global from '../../_global.mdx';
import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';

# spo file retentionlabel ensure

Expand Down Expand Up @@ -37,6 +39,25 @@ You can also use [spo listitem retentionlabel remove](./../../../cmd/spo/listite

The `--assetId` option has to do with event-based retention. Event-based retention is about starting a retention period when a specific event occurs, instead of the moment a document was labeled or created.

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|------------|----------------|
| SharePoint | AllSites.Write |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|------------|---------------------|
| SharePoint | Sites.ReadWrite.All |

</TabItem>
</Tabs>

## Examples

Applies a retention label to a file based on the label name and the fileUrl.
Expand Down
21 changes: 21 additions & 0 deletions docs/docs/cmd/spo/file/file-retentionlabel-remove.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,6 @@
import Global from '../../_global.mdx';
import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';

# spo file retentionlabel remove

Expand Down Expand Up @@ -28,6 +30,25 @@ m365 spo file retentionlabel remove [options]

<Global />

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|------------|----------------|
| SharePoint | AllSites.Write |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|------------|---------------------|
| SharePoint | Sites.ReadWrite.All |

</TabItem>
</Tabs>

## Examples

Removes the retention label from a file in a given site based on the file id.
Expand Down
21 changes: 21 additions & 0 deletions docs/docs/cmd/spo/file/file-roleassignment-add.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,6 @@
import Global from '../../_global.mdx';
import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';

# spo file roleassignment add

Expand Down Expand Up @@ -46,6 +48,25 @@ m365 spo file roleassignment add [options]

<Global />

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|------------|----------------------|
| SharePoint | AllSites.FullControl |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|------------|-----------------------|
| SharePoint | Sites.FullControl.All |

</TabItem>
</Tabs>

## Examples

Adds a role assignment to a file with a specified id. It will use a principal id and a specific role definition id.
Expand Down
21 changes: 21 additions & 0 deletions docs/docs/cmd/spo/file/file-roleassignment-remove.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,6 @@
import Global from '../../_global.mdx';
import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';

# spo file roleassignment remove

Expand Down Expand Up @@ -43,6 +45,25 @@ m365 spo file roleassignment remove [options]

<Global />

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|------------|----------------------|
| SharePoint | AllSites.FullControl |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|------------|-----------------------|
| SharePoint | Sites.FullControl.All |

</TabItem>
</Tabs>

## Examples

Remove a role assignment by principal id from a file by id.
Expand Down
21 changes: 21 additions & 0 deletions docs/docs/cmd/spo/file/file-roleinheritance-break.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,6 @@
import Global from '../../_global.mdx';
import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';

# spo file roleinheritance break

Expand Down Expand Up @@ -31,6 +33,25 @@ m365 spo file roleinheritance break [options]

<Global />

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|------------|----------------------|
| SharePoint | AllSites.FullControl |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|------------|-----------------------|
| SharePoint | Sites.FullControl.All |

</TabItem>
</Tabs>

## Examples

Break the inheritance of a file with a specific id (UniqueId).
Expand Down
21 changes: 21 additions & 0 deletions docs/docs/cmd/spo/file/file-roleinheritance-reset.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,6 @@
import Global from '../../_global.mdx';
import Tabs from '@theme/Tabs';
import TabItem from '@theme/TabItem';

# spo file roleinheritance reset

Expand Down Expand Up @@ -28,6 +30,25 @@ m365 spo file roleinheritance reset [options]

<Global />

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|------------|----------------------|
| SharePoint | AllSites.FullControl |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|------------|-----------------------|
| SharePoint | Sites.FullControl.All |

</TabItem>
</Tabs>

## Examples

Reset inheritance of file with the specified id (UniqueId) located in the specified site.
Expand Down
19 changes: 19 additions & 0 deletions docs/docs/cmd/spo/file/file-sharinginfo-get.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,25 @@ m365 spo file sharinginfo get [options]

<Global />

## Permissions

<Tabs>
<TabItem value="Delegated">

| Resource | Permissions |
|------------|---------------|
| SharePoint | AllSites.Read |

</TabItem>
<TabItem value="Application">

| Resource | Permissions |
|------------|----------------|
| SharePoint | Sites.Read.All |

</TabItem>
</Tabs>

## Examples

Get file sharing information report for the file with the specified server-relative url located in the specified site.
Expand Down