Skip to content

Commit 97c4470

Browse files
committed
Merge branch 'update-ga' of github.com:cindylay/sp-dev-docs into update-ga
2 parents 96f9f46 + 009e722 commit 97c4470

File tree

1 file changed

+1
-15
lines changed

1 file changed

+1
-15
lines changed

docs/embedded/concepts/app-concepts/sharing-and-perm.md

Lines changed: 1 addition & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ ms.localizationpriority: high
99

1010

1111
## Additive Permissions
12-
In SharePoint Embedded, users cannot break the permission inheritance; they can only add "additive permissions" to content such as files and folders within a Container. To grant extra permissions to a user beyond what they have on the Container, for example, if *UserA* is member of the Reader role, you can allow that user to edit a specific document in that Container using the Microsoft Graph:
12+
In SharePoint Embedded, content always inherits permissions from its parent hierarchy. While you cannot alter this inherited permission structure, you can extend access within a container by applying "additive permissions" to specific files and folders. For instance, if _UserA_ belongs to the Reader role, you can grant the user edit permission to a particular document in that container using Microsoft Graph:
1313

1414
| Scenario | Microsoft Graph API(s) | Notes |
1515
| :---------------------------- | :-------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | :---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
@@ -18,8 +18,6 @@ In SharePoint Embedded, users cannot break the permission inheritance; they can
1818
| Delete an additive permission | [DELETE /drives/{drive-id}/items/{item-id}/permissions/{perm-id}](/graph/api/permission-delete) | You can only delete the additive permission on the drive item where it was originally added. |
1919

2020

21-
22-
2321
## Role-based Sharing Setting
2422

2523
SharePoint Embedded offers a role-based sharing model that allows developers to configure file-sharing permissions based on Container permission roles, offering a choice between restrictive and open sharing model (default). This sharing setting is part of [container type configuration](containertypes.md#configuring-container-types). This configuration can only be set by application owner's developers. To learn more about container permission roles, please refer to [Authentication and Authorization with SharePoint Embedded](auth.md#container-permissions).
@@ -40,15 +38,8 @@ Set-SPOContainerTypeConfiguration
4038
-sharingRestricted $True
4139
```
4240

43-
<<<<<<< HEAD
4441
## Sharing Configuration Setting
45-
46-
By default, SharePoint Embedded app sharing configuration is the same as consuming tenant sharing configuration. For example, if the consuming Tenant disabled sharing to Guest users, then your SharePoint Embedded application won’t be able to add Guest Users to the Container roles or grant them additive permissions.
47-
=======
48-
## Consuming Tenant Admin Sharing Configuration Settings
49-
5042
By default, SharePoint Embedded app sharing configuration is the same as the consuming tenant sharing configuration. For example, if the consuming tenant is configured to disable sharing for Guest users, then the SharePoint Embedded application is unable to add Guest Users to Container roles or grant them additive permissions.
51-
>>>>>>> 74c0ca4e9b82ce9d4bdf5b84d1c5f03e7b215ec5
5243

5344
### Application External Sharing Override
5445

@@ -61,9 +52,4 @@ Set-SPOApplication
6152
-OwningApplicationID <indentifier>
6253
-OverrideTenantSharingCapability $true
6354
-SharingCapability ExistingExternalUserSharing
64-
<<<<<<< HEAD
65-
```
66-
=======
6755
```
68-
69-
>>>>>>> 74c0ca4e9b82ce9d4bdf5b84d1c5f03e7b215ec5

0 commit comments

Comments
 (0)