Skip to content

Error attempting to assign an Azure security group to a SharePoint Embedded container #10404

@DarbyHendrix

Description

@DarbyHendrix

Similar to issue #9805 , I am encountering an error attempting to assign a security group permission to a SP Embedded container. I can confirm that our SP Online environment is properly configured with our Azure tenant and a Container type ID has been registered with the appropriate permissions for our App registration in Azure. We can create / manage / delete containers as well as manage the document within those containers with Application or Delegated security.

When I use Postman (Application permission, not delegated) to call the MS Graph endpoint: to create a container permission:
POST https://graph.microsoft.com/beta/storage/fileStorage/containers/{{ContainerId}}/permissions
with the following JSON body:

{
  "roles": ["reader"],
  "grantedToV2": {
    "group": {
        "id" : "e0dc3815-9c9c-4222-afd9-29921d7294ac"
    }
  }
}

the id is the object ID of the Security group in Azure

I receive the following error

{
    "error": {
        "code": "invalidRequest",
        "message": "The specified user c:0o.c|federateddirectoryclaimprovider|e0dc3815-9c9c-4222-afd9-29921d7294ac could not be found.",
        "innerError": {
            "code": "badArgument",
            "date": "2025-09-18T16:26:28",
            "request-id": "efed8249-e798-4689-a02d-ea63ab7ce74c",
            "client-request-id": "efed8249-e798-4689-a02d-ea63ab7ce74c"
        }
    }
}

I have had no issues assigning users permission to SP containers, and I also have not been able to find any documentation confirming that assigning Security Group permission SP Embedded is even possible.

Metadata

Metadata

Assignees

Labels

sharepoint-developer-supportsharepoint-developer-supporttype:uservoice-requestEnhancements & feature requests should be posted: http://aka.ms/sp-dev-uservoice

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions