Unable to Assign Sites.Selected Write Access to a Single SharePoint Site: Grant-PnPAzureADAppSitePermission Failing

Question

Unable to Assign Sites.Selected Write Access to a Single SharePoint Site: Grant-PnPAzureADAppSitePermission Failing

Gamage 20

Hi everyone,

I’m trying to configure restricted SharePoint access for an automation workflow (n8n chatbot). My goal is to allow an Azure App Registration to access ONE SharePoint site only using Sites.Selected with Write permissions.

However, I keep running into multiple PowerShell errors and cannot successfully grant the permission.

✔ What I already did

1. App Registration (Azure Entra ID)

Created an App Registration using an admin account.

Added API Permissions: Sites.Selected (Application) & Files.ReadWrite.All (Application)

Created a Client Secret.

2. SharePoint Setup

Created a dedicated site ONLY for my specific work

3.Installed PnP.PowerShell Using PowerShell 7.5.4

Whenever I try to connect or grant the permission, I get errors.

ERROR 1 — Connect-PnPOnline -Url "https://

Rukmini 43,705 Reputation points Microsoft External Staff Moderator

2025-12-11T17:01:02.27+00:00

Hello Gamage,

Following up to see if the above provided information was helpful. If you have any further queries do let us know.
Gamage 20 Reputation points

2025-12-12T02:44:27.92+00:00

Thank you for your reply. I followed the exact steps you shared, but I'm still running into an issue.

When I tested it in the Graph Explorer, I received a 400 Bad Request with an empty response body (screenshot attached) error01.PNG.

To double-check, I also tried the same request using PowerShell, but that returned an "itemNotFound" error, even though I’m certain that the siteId I used is correct (screenshot attached) error02.PNG.

Do you have any idea what might be causing this?
Rukmini 43,705 Reputation points Microsoft External Staff Moderator

2025-12-12T17:30:48.2966667+00:00

Hello Gamage,

Can we connect offline to resolve the issue? Please share your emailID and available time and time zone over private messages.

1 answer

Your answer

Rukmini 43,705 Reputation points Microsoft External Staff Moderator

2025-12-11T17:01:02.27+00:00

Hello Gamage,

Following up to see if the above provided information was helpful. If you have any further queries do let us know.
Gamage 20 Reputation points

2025-12-12T02:44:27.92+00:00

Thank you for your reply. I followed the exact steps you shared, but I'm still running into an issue.

When I tested it in the Graph Explorer, I received a 400 Bad Request with an empty response body (screenshot attached) error01.PNG.

To double-check, I also tried the same request using PowerShell, but that returned an "itemNotFound" error, even though I’m certain that the siteId I used is correct (screenshot attached) error02.PNG.

Do you have any idea what might be causing this?
Rukmini 43,705 Reputation points Microsoft External Staff Moderator

2025-12-12T17:30:48.2966667+00:00

Hello Gamage,

Can we connect offline to resolve the issue? Please share your emailID and available time and time zone over private messages.

Answer 1

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more