使用Microsoft Graph创建的SharePoint文档View共享链接为何可编辑？

I’ve run into this exact issue multiple times with clients—let’s walk through the most likely culprits and fixes to get your view-only links working as expected:

1. Existing Direct/Inherited Edit Permissions Are Overriding the Link #

Shared links don’t replace or restrict existing permissions a user already has. If the member (or a group they belong to) has Edit access to the document, its parent library, or the entire site, they’ll keep that editing ability even when using a view-only link.

To check this:

• Navigate to the document in SharePoint > Click Share > Select Advanced at the bottom of the share panel.
• Scan the permissions list for the user or their security/distribution groups. If you see "Edit" listed next to their entry, that’s the root cause.
• Remove the unnecessary edit permissions (or adjust group memberships) to ensure the view-only link is the governing access method.

2. Double-Check Your Microsoft Graph Link Configuration #

Even if you set type: "view", there are a few easy-to-miss details that could break the restriction:

• Explicitly set allowEdit: false: While the docs state type: "view" implies read-only, adding this parameter eliminates any ambiguity. Your API request body should look like this:

  {
    "type": "view",
    "scope": "organization",
    "allowEdit": false
  }
  

• Validate the created link’s properties: Use this Graph API call to inspect the actual permissions tied to your link:

  GET /sites/{site-id}/drive/items/{item-id}/permissions
  

  Look for the permission entry linked to your share—confirm allowEdit is false and link.type is "view".

3. Site/Library Permission Settings Might Be Conflicting #

If your document library has broken permission inheritance or broad default permissions, it could bypass the link’s restrictions:

• Go to the library > Settings > Library settings > Permissions for this document library.
• Check if groups like "Organization Members" have default Edit access. If so, you’ll need to narrow these permissions to match your view-only link’s intent.

4. Cache or Session Conflicts Are Keeping Old Permissions #

Sometimes users retain edit access from a previous session. Ask the affected member to:

• Close all Office desktop apps and browser tabs related to the document.
• Open the view-only link in incognito mode (or clear their browser cache) to test with a fresh session.

5. Tenant-Wide Sharing Policies Could Be Overriding Individual Links #

Check your organization’s SharePoint admin settings:

• Go to the SharePoint admin center > Policies > Sharing.
• Ensure the "Organization-wide sharing settings" don’t enforce edit access for all internal users, which would override your view-only link restrictions.

内容的提问来源于stack exchange，提问作者Codecrasher99