Let’s spread the news!
Already since beginning of April (2024), we have new, granular Graph API permissions in OneDrive and SharePoint.

This approach follows the granular access rights model, that we know from SharePoint.
It works for both, application and delegated modes and on top of Sites.Selected that we all know and use, include:

• Lists.SelectedOperations.Selected: manages application access at the list level, providing access to a specific list,
• ListItems.SelectedOperations.Selected: manages application access at the files, list item, or folder level, providing access to one or more list items,
• Files.SelectedOperations.Selected manages application access at the file or library folder level, providing access to one or more files.

See overview of Selected permissions in OneDrive and SharePoint

I think it’s massively important improvement, and seeing that I only found two blogs covering this topic:

• Granular permissions for working with files, list items and lists added to the Graph API!
• New granular permission model in SharePoint

I feel like we should make an effort to promote it more :)

Enjoy summer!