microsoft-sharepoint.deleteList critical conf mediumhuman approval
Permanently deletes an entire SharePoint list and every record it contains with no undo, destroying potentially business-critical data in one call.
microsoft-sharepoint.shareFileOrFolder high conf mediumOBO
Grants read or write access on a file or folder to additional principals, widening who can reach potentially confidential documents.
microsoft-sharepoint.sendInviteForList high conf mediumOBO
Grants another principal permissions on a SharePoint list, exposing its records to a newly invited user.
microsoft-sharepoint.setSensitivityLabelOnFile high conf mediumOBO
Changes a file's sensitivity label, which can downgrade its data classification and relax the encryption and DLP controls that protect it.
microsoft-sharepoint.deleteColumn high conf mediumhuman approval
Removes a list column and erases the stored value of that field for every item in the list, an irreversible bulk data loss.
microsoft-sharepoint.deleteFileOrFolder high conf mediumOBO
Deletes a file or folder from a document library; for a folder this cascades to every item it contains.
All other tools (17)
microsoft-sharepoint.copyFileOrFolder medium conf mediumaudit
Copies a file or folder to another location, potentially duplicating sensitive content into a less-restricted library.
microsoft-sharepoint.createColumn low conf mediumallow
Adds a new column to a SharePoint list schema.
microsoft-sharepoint.createFolder low conf mediumallow
Creates a new folder within a document library.
microsoft-sharepoint.createList medium conf mediumaudit
Creates a new SharePoint list container within a site.
microsoft-sharepoint.createListItem low conf mediumallow
Adds a new item (record) to a SharePoint list.
microsoft-sharepoint.createSmallBinaryFile medium conf mediumaudit
Creates or uploads a binary file into a document library from base64-encoded content.
microsoft-sharepoint.createSmallTextFile medium conf mediumaudit
Creates or uploads a text file into a document library, adding new content to a shared workspace.
microsoft-sharepoint.deleteListItem medium conf mediumaudit
Deletes a single item (record) from a SharePoint list, potentially removing personal data held in the row.
microsoft-sharepoint.findFileOrFolder medium conf mediumaudit
Searches for files and folders across every site and document library the user can access, enabling broad content discovery.
microsoft-sharepoint.listListItems medium conf mediumaudit
Reads items (records) from a SharePoint list, which may include personal data held in list fields.
microsoft-sharepoint.moveFileOrFolder medium conf mediumaudit
Moves a file or folder to another folder, including across document libraries, changing its location and inherited permissions.
microsoft-sharepoint.readSmallBinaryFile medium conf mediumaudit
Downloads the full contents of a binary file as base64, potentially exposing confidential document data.
microsoft-sharepoint.readSmallTextFile medium conf mediumaudit
Downloads the full contents of a text file, which may contain personal or confidential information.
microsoft-sharepoint.renameFileOrFolder low conf mediumallow
Renames a file or folder within a document library.
microsoft-sharepoint.updateColumn medium conf mediumaudit
Modifies an existing list column definition, which can alter validation or type for every item's value in that field.
microsoft-sharepoint.updateListItem medium conf mediumaudit
Updates fields on an existing SharePoint list item, changing stored record values that may include personal data.
microsoft-sharepoint.uploadFileFromUrl medium conf mediumaudit
Imports a file from a SharePoint or OneDrive URL into a destination library, bringing external content into the workspace.