Share a OneDrive/SharePoint file by creating a reusable sharing link (createLink) or sending a direct sharing invitation with granted permissions (invite) via Microsoft Graph.

Documented steps

1. Acquire a token with delegated Files.ReadWrite (least privileged) or Files.ReadWrite.All/Sites.ReadWrite.All for broader access; application calls need Files.ReadWrite.All.
2. Option A — sharing link: POST https://graph.microsoft.com/v1.0/me/drive/items/{item-id}/createLink with body {"type": "view", "scope": "anonymous"} (type: view, edit, or embed; scope: anonymous, organization, or users). If scope is omitted, the organization's default link type is used.
3. createLink returns 201 Created (new link) or 200 OK (existing link of that type reused) with a Permission object containing link.webUrl (and link.webHtml for embed links) — link.webUrl is the shareable URL.
4. For an internal-only link, set "scope": "organization" (only on OneDrive for Business/SharePoint, not personal OneDrive); embed links are only available for OneDrive personal files.
5. retainInheritedPermissions defaults to true; set it to false in the request body to remove all existing inherited permissions the first time the item is shared.
6. Option B — direct invitation: POST https://graph.microsoft.com/v1.0/me/drive/items/{item-id}/invite with body {"recipients": [{"email": "user@contoso.com"}], "roles": ["write"], "requireSignIn": true, "sendInvitation": true, "message": "..."} to grant access and optionally email a notification.
7. invite returns 200 OK with a collection of Permission objects; with multiple recipients some may fail while others succeed, returning 207 Multi-Status with per-recipient error objects (e.g. accountVerificationRequired, exchangeOutOfMailboxQuota, exchangeMaxRecipients).
8. Docs: https://learn.microsoft.com/en-us/graph/api/driveitem-createlink ; https://learn.microsoft.com/en-us/graph/api/driveitem-invite