Unable to track Document Library permission changes in SharePoint via Microsoft Graph Delta API

Question

Unable to track Document Library permission changes in SharePoint via Microsoft Graph Delta API

Anastasiya Bardanos 20

We are using the /drives/{drive-id}/root/delta endpoint with a header "Prefer": "deltashowremovedasdeleted, deltatraversepermissiongaps, deltashowsharingchanges" to track changes in SharePoint, as documented. However, we encountered an issue where changes to a Document Library's permissions (e.g., granting access to a new user or modifying existing permissions) are not detected by this endpoint.
lib_perm

Based on the official documentation (Delta Query Overview), it appears that library-level resources may not be supported for delta tracking.

Request for Assistance:

Could you please confirm whether library-level permission changes are supported for tracking via Microsoft Graph? If not, what is the recommended approach to retrieve permission changes at the Document Library level?

Thank you for your guidance.

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

RaytheonXie_MSFT 40,501 Microsoft External Staff

Hi @Anastasiya Bardanos ,

With current Graph APIs, there is no straight forward way of tracking permission changes. The delta API should tell you that something has changed for the library.

I would recommend you to use Microsoft Purview Compliance Portal to track the permission changes. You could refer to following steps

https://admindroid.com/how-to-get-sharepoint-online-permission-changes-report-in-microsoft-365

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

RaytheonXie_MSFT 40,501 Reputation points Microsoft External Staff

2025-03-17T02:09:06.5566667+00:00

Hi @Anastasiya Bardanos ,

Have you tried the solution I proposed?

If you have any questions or progress, you can contact me in time.

Looking forward to your reply

Have a lucky day!

Thanks,

Raytheon Xie
RaytheonXie_MSFT 40,501 Reputation points Microsoft External Staff

2025-03-18T09:56:58.7433333+00:00

Hi @Anastasiya Bardanos ,

Would you tell me whether your issue has been resolved or have any update? If you have any questions or progress, you can contact me in time.
Anastasiya Bardanos 20 Reputation points

2025-03-18T10:39:21.6066667+00:00

@RaytheonXie_MSFT hi! Unfortunately, your suggestion doesn't work for us. Our company works with customers and we don't have access to their audit logs. We can only use an API. So the only solution I see is using the SharePoint API to retrieve library permissions and compare them during every iteration. If smth is changed, check the permissions of all library items. It doesn't look like a good solution but I couldn't come up with a better one.
Anastasiya Bardanos 20 Reputation points

2025-03-18T10:40:48.2633333+00:00

@RaytheonXie_MSFT hi! Unfortunately, your suggestion doesn't work for us. Our company works with customers and we don't have access to their audit logs. We can only use an API. So the only solution I see is using the SharePoint API to retrieve library permissions and compare them during every iteration. If smth is changed, check the permissions of all library items. It doesn't look like a good solution but I couldn't come up with a better one.
RaytheonXie_MSFT 40,501 Reputation points Microsoft External Staff

2025-03-19T08:43:29.8966667+00:00

Hi @Anastasiya Bardanos ,

Currently Graph api doesn't support track library permission directly. Given this situation, I sincerely suggest you add your suggestion in SharePoint Feedback which is a specific platform for us to collect user's request. Your suggestion will help us improve our Products and give users a better experience.

Your understanding is highly appreciated.