Skip to main content
Use the @bijection/connectors/microsoft-graph entrypoint to declare Microsoft Graph resources.

​
Availability

This page describes the pinned source package. Published availability is unestablished for this artifact. Source build and package availability.

​
Resources and modes

Declare a resource in application code, then bind deployment-specific settings and credentials. See typed resources, connections and source inspection.

​
Mail folder

​
delta: delta

The following example matches configuration standard.

​
Configuration: standard

Case: microsoft-graph/folder/delta/standard. Connection and resource configuration are declared by this exact case. Credential kind: microsoft-graph. Keep credential material in the private credential inventory.
Native admission analysis is available for this exact declaration. Collection: contents
Collection: memberships
Collection: messages
File contracts: raw.
Recorded checks Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

​
OneDrive or SharePoint document library

​
delta: delta

The following example matches configuration standard.

​
Configuration: standard

Case: microsoft-graph/drive/delta/standard. Connection and resource configuration are declared by this exact case. Credential kind: microsoft-graph. Keep credential material in the private credential inventory.
Native admission analysis is available for this exact declaration. Collection: contents
Collection: items
File contracts: download.
Recorded checks Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

​
Configuration: writes

Case: microsoft-graph/drive/delta/writes. Connection and resource configuration are declared by this exact case. Credential kind: microsoft-graph. Keep credential material in the private credential inventory.
Native admission analysis is available for this exact declaration. Collection: contents
Collection: items
Commands File contracts: download.
Recorded checks Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

​
SharePoint list

​
delta: delta

The following example matches configuration standard.

​
Configuration: standard

Case: microsoft-graph/list/delta/standard. Connection and resource configuration are declared by this exact case. Credential kind: microsoft-graph. Keep credential material in the private credential inventory.
Native admission analysis is available for this exact declaration. Collection: fields
Collection: items
Recorded checks Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

​
Teams channel messages

​
delta: delta

The following example matches configuration standard.

​
Configuration: standard

Case: microsoft-graph/channel/delta/standard. Connection and resource configuration are declared by this exact case. Credential kind: microsoft-graph. Keep credential material in the private credential inventory.
Native admission analysis is available for this exact declaration. Collection: bodies
Collection: messages
Recorded checks Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

​
Excel table

​
rows: rows

The following example matches configuration standard.

​
Configuration: standard

Case: microsoft-graph/table/rows/standard. Connection and resource configuration are declared by this exact case. Credential kind: microsoft-graph. Keep credential material in the private credential inventory.
Native admission analysis is available for this exact declaration. Collection: rows
Recorded checks Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

​
Entra ID users

​
delta: delta

The following example matches configuration standard.

​
Configuration: standard

Case: microsoft-graph/users/delta/standard. Connection and resource configuration are declared by this exact case. Credential kind: microsoft-graph. Keep credential material in the private credential inventory. Inspect the complete configuration contract below for settings and conditional requirements.
Native admission analysis is available for this exact declaration. Collection: onPremises
Collection: users
Recorded checks Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

​
Entra ID groups and memberships

​
delta: delta

The following example matches configuration standard.

​
Configuration: standard

Case: microsoft-graph/groups/delta/standard. Connection and resource configuration are declared by this exact case. Credential kind: microsoft-graph. Keep credential material in the private credential inventory. Inspect the complete configuration contract below for settings and conditional requirements.
Native admission analysis is available for this exact declaration. Collection: groups
Collection: memberships
Recorded checks Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

​
Planner plan tasks

​
tasks: Whole plan walked every pass, If-Match updates

The following example matches configuration standard.

​
Configuration: standard

Case: microsoft-graph/plan/tasks/standard. Connection and resource configuration are declared by this exact case. Credential kind: microsoft-graph. Keep credential material in the private credential inventory.
Native admission analysis is available for this exact declaration. Collection: details
Collection: tasks
Recorded checks Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

​
Configuration: writes

Case: microsoft-graph/plan/tasks/writes. Connection and resource configuration are declared by this exact case. Credential kind: microsoft-graph. Keep credential material in the private credential inventory.
Native admission analysis is available for this exact declaration. Collection: details
Collection: tasks
Commands
Recorded checks Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

​
OneNote section pages

​
pages: Whole section walked every pass, unchanged pages skipped

The following example matches configuration standard.

​
Configuration: standard

Case: microsoft-graph/notebook/pages/standard. Connection and resource configuration are declared by this exact case. Credential kind: microsoft-graph. Keep credential material in the private credential inventory.
Native admission analysis is available for this exact declaration. Collection: contents
Collection: pages
File contracts: content.
Recorded checks Hosted qualification: unestablished for this catalog configuration. Installed connections report their own identity, authority and current status.

​
Provider guidance

Compiled declaration examples and configuration details are published in the connector reference. Every resource uses the microsoft-graph credential (microsoftGraph.credential). Content and directory resources expect an Entra ID application credential (oauth_client_credentials with scope https://graph.microsoft.com/.default); the mail folder and the OneNote notebook read /me and need a delegated grant. Bindings supply the Graph ids: driveId (OneDrive or a SharePoint document library), siteId and listId, teamId and channelId, driveId, itemId and tableId for an Excel table, planId for a Planner plan, or sectionId for a OneNote section. Users and groups address the tenant root.
  • Drives read root/delta. A deleted facet with state deleted is the only tombstone. Each changed item is read once; a file’s bytes stream from its pre-authenticated @microsoft.graph.downloadUrl into protected storage under maxContentBytes (default 256 MiB, at most 1 GiB), with no credential sent to that address. The delta’s eTag gates the read: an item whose published download ETag equals it is skipped. contents.status is stored, not_a_file or no_download_url. An item’s eTag is its record version; an item read without one is left unresolved.
  • Drive writes (opt-in). writes: { governingRule } adds three single-attempt commands on items. create uploads content (a stored file) as name under parentId with PUT items/{parentId}:/{name}:/content?@microsoft.graph.conflictBehavior=fail: 201 creates, and an existing name is Graph’s 409 nameAlreadyExists. replace (PUT items/{id}/content) and delete (DELETE items/{id}) send the published eTag as If-Match; a changed item is a 412 refusal. Throttling and 5xx answers are unknown, and a lost answer stays unknown. Bodies use Graph’s simple upload, at most 250,000,000 bytes; upload sessions, which send byte ranges to a URL a first response returns, are not built.
  • Lists read items/delta and each changed item, published as items (system metadata) and fields (the selected columns).
  • Channels read root messages through messages/delta, published as messages (who and when) and bodies (content). A soft-deleted message stays a row carrying deletedDateTime. Replies are not read.
  • Excel tables read all rows in one response each pass, keyed by row position. Inserting or sorting rows re-keys later rows, and removed rows are not withdrawn.
  • Users and groups read users/delta and groups/delta. @removed (changed or deleted) is a tombstone. Users publish users and onPremises (the Active Directory join keys of synchronized users). A group read includes one page of up to 999 direct members; complete is false when more exist.
  • Planner plans (/v1.0/planner, binding planId) need the application permission Tasks.Read.All (Tasks.ReadWrite.All for writes). Graph v1.0 has no Planner delta (/beta/planner/tasks/delta is beta-only), so every pass, about every 15 minutes, walks plans/{planId}/tasks through @odata.nextLink and retains no checkpoint. Editing a task’s details does not move the task’s etag, so no listed version skips a key: each listed task is read again every pass with tasks/{id} (tasks, versioned by its @odata.etag, e.g. W/"JzEt...") and tasks/{id}/details (details: description, preview type, checklist and references, with the details’ own etag). A 404 on either read leaves the key unresolved. A listing states no removal, so a deleted task is never withdrawn: it stays a present row with its last values. The account is the plan id.
  • Planner writes (opt-in). writes: { governingRule } adds update on tasks: one PATCH tasks/{id} of any of title, percentComplete, priority, startDateTime, dueDateTime (text or null) and bucketId, with the published etag as If-Match. 200 and 204 apply; 400, 403, 404, 409 and 412 (a changed task) refuse; throttling and 5xx answers are unknown, and a lost answer stays unknown.
  • OneNote sections (/v1.0/me/onenote, binding sectionId) need a delegated grant with Notes.Read (or Notes.Read.All for notebooks shared with the user) and the id of /me, which is the account: Microsoft stopped admitting app-only tokens to the OneNote APIs on 2025-03-31. Notebooks of other users, groups and SharePoint sites are not addressed. OneNote has no delta, so every pass walks sections/{sectionId}/pages (100 per page, ordered by creation) and retains no checkpoint. The listed lastModifiedDateTime gates the fanout: a page whose published contents.content_version equals it is skipped. Each other page is read as pages (title, times, level, order, web URL, section and notebook id and name) and its HTML (pages/{id}/content) streams into protected storage as contents.file under maxContentBytes (default 16 MiB, at most 1 GiB); content_version is the modification time read just before the bytes. Images and attachments the HTML references are not read, nor is notebook or section metadata beyond the names on each page. A deleted page is never withdrawn, and one deleted while a pass walks can shift another page into the next pass.
A 410 from a delta restarts its traversal. One traversal pass is bounded by the coupled acquisition’s key and page limits, so a first pass over a very large drive or directory can be refused. Planner and OneNote walk their whole listing on every pass, so a plan or section above that bound (about 1,170 keys or 128 pages) is refused on every pass, and a Planner listing page must fit one 512 KiB retained response. Inspect the installed source for its exact profile. No Graph tenant has been reached by these recipes’ checks.

​
Provider references

Provider references and prerequisites are maintained in the connector guidance above. No separate provider-documentation review date is recorded.

​
Source and evidence

Canonical connector source, native analysis and check receipts. Connector artifact: 905888ea276a2a28e36981a79e8142b2547ea451c3e63162cb6915ad4a7d1305. The resource declaration examples above are compiled and compared with exact catalog declarations. Recorded checks apply only to their source, declaration and runtime identities. Configure a connection and inspect its status to establish deployment-specific readiness.