Microsoft Graph API - Access Documents From SharePoint Document Library Using Azure AD Application Credentials And Postman

Microsoft Graph is a RESTful web API that enables you to access Microsoft Cloud service resources. In this article, we will go through the requests we have to make in order to access the documents in a SharePoint Document Library.

Prerequisites

• Register an Azure AD app and allow the app to have full/read control to SharePoint sites in all site collections without a signed-in user. Refer to the Microsoft Graph permissions reference here.
• Note down the Application ID(Client ID) and Key(Client Secret).
• Download and install Postman that simplifies the API testing or any API Testing Tool.

REST Calls involved

Get Access Token

To call Microsoft Graph, your app must acquire an access token from Azure Active Directory (Azure AD), Microsoft’s Cloud Identity service. Access tokens issued by Azure AD are base 64 encoded JSON Web Tokens (JWT). They contain information (claims) that web APIs secured by Azure AD, like Microsoft Graph, are used to validate the caller and to ensure that the caller has the proper permissions to perform the operation they’re requesting.

Copy “access_token” value from the following API call’s response. This value will be used in the subsequent REST API calls as bearer token.

Replace

{tenant-id} with your Office 365 Tenant ID. You can find the same from here.

{client-id} with Application ID copied from Azure AD Application.

{client-secret} with Key(Client Secret) copied from Azure AD Application.

Get SharePoint Site ID

We have to get the SharePoint Site ID(highlighted) where the document library is located using the following URL.

https://graph.microsoft.com/v1.0/sites/{host-name}:/{server-relative-path}

Replace

{host-name} with your SharePoint online root site URL.

{server-relative-path} with the site’s relative path.