Create or update explicit content access entries for one or more users or groups on a specific TeamSite item. The item can be TeamSite home (itemId: root), a folder, or a file.

Content Access Permissions

Content Access Permissions are enforced at the TeamSite root, folder, and file level and support these permission ids:
403 (CanView): View, comment, and approve content.
404 (CanEdit): Edit and add folders, and edit, add, publish, or move files.
405 (CanManage): Edit, add, publish, move, delete, and manage content access.

Domain Terms

• addContentAccessPermissions: Members and permission ids to add who do not already have an explicit access entry on the target item.
• modifyContentAccessPermissions: Existing explicit access entries whose permission level should be changed.
• contentAccessNotify: Optional notification configuration applied after the access update succeeds; subscribers receive a message only when needNotify is true.
• Full-control members: Members whose access entry cannot be added, modified, or removed by this API.

Validation Rules

1. The caller must have CanManage on the target item.
2. Updating member access at TeamSite root additionally requires CanManage on root.
3. Full-control members cannot be added or modified.
4. When the library-content-access-updates feature toggle is enabled, TeamSite owner access cannot be modified.
5. Each member entry must specify exactly one permission id from 403, 404, or 405.