Microsoft Excel · OAuth Scopes

Microsoft Excel OAuth Scopes

OAuth 2.0 searched

Microsoft Excel publishes 6 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the Microsoft Excel API on a user’s behalf.

Tokens are issued from https://login.microsoftonline.com/common/oauth2/v2.0/token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

AutomationData AnalysisMicrosoftMicrosoft 365OfficeSpreadsheets

Scopes: 6 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://login.microsoftonline.com/common/oauth2/v2.0/authorize

Token URL
https://login.microsoftonline.com/common/oauth2/v2.0/token

Flows
authorizationCode

Scopes (6)

Scope	Description	Flows
Files.Read	Read the signed-in user's files.	authorizationCode
Files.ReadWrite	Read, create, update and delete the signed-in user's files.	authorizationCode
Files.Read.All	Read all files the signed-in user can access.	authorizationCode
Files.ReadWrite.All	Read, create, update and delete all files the signed-in user can access.	authorizationCode
Sites.Read.All	Read documents and list items in all site collections on behalf of the signed-in user (SharePoint-hosted workbooks).	authorizationCode
Sites.ReadWrite.All	Edit or delete documents and list items in all site collections on behalf of the signed-in user (SharePoint-hosted workbooks).	authorizationCode

📄 Provider scope reference: https://learn.microsoft.com/en-us/graph/permissions-reference

Source

OAuth Scopes

generated: '2026-06-20'
method: searched
source: openapi/microsoft-excel-graph-api.yaml
docs: https://learn.microsoft.com/en-us/graph/permissions-reference
note: >-
  Baseline (Files.Read, Files.ReadWrite) derived from the OpenAPI oauth2 flow; the .All and
  Sites.* scopes added from the Microsoft Graph permissions reference — they are the
  delegated permissions required to reach Excel workbooks beyond the signed-in user's own
  files (shared files and SharePoint-hosted workbooks).
schemes:
- name: oauth2
  source: openapi/microsoft-excel-graph-api.yaml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://login.microsoftonline.com/common/oauth2/v2.0/authorize
    tokenUrl: https://login.microsoftonline.com/common/oauth2/v2.0/token
  description: OAuth 2.0 authorization using Microsoft Identity Platform
scopes:
- scope: Files.Read
  description: Read the signed-in user's files.
  flows: [authorizationCode]
  sources: [openapi/microsoft-excel-graph-api.yaml]
- scope: Files.ReadWrite
  description: Read, create, update and delete the signed-in user's files.
  flows: [authorizationCode]
  sources: [openapi/microsoft-excel-graph-api.yaml]
- scope: Files.Read.All
  description: Read all files the signed-in user can access.
  flows: [authorizationCode]
  sources: [docs]
- scope: Files.ReadWrite.All
  description: Read, create, update and delete all files the signed-in user can access.
  flows: [authorizationCode]
  sources: [docs]
- scope: Sites.Read.All
  description: Read documents and list items in all site collections on behalf of the signed-in user (SharePoint-hosted workbooks).
  flows: [authorizationCode]
  sources: [docs]
- scope: Sites.ReadWrite.All
  description: Edit or delete documents and list items in all site collections on behalf of the signed-in user (SharePoint-hosted workbooks).
  flows: [authorizationCode]
  sources: [docs]