Safety & privacy
By Pedro Albaladejo · ClearCopies
Updated August 12, 2026 · 7 min read
What Does Read-Only OneDrive Access Mean?
Understand what read scope permits, what it blocks, and why metadata still needs protection.
“Read-only” is often interpreted as “cannot do anything harmful.” More precisely, it limits modification. An application may still learn a great deal from the data it can read, depending on the selected Microsoft Graph scope.
Read the full scope on Microsoft’s consent screen and compare it with the feature. A duplicate inventory needs file visibility; showing groups, choosing keepers, or exporting a plan should not change any file.
A practical checklist
- 1Identify the exact scope and account shown by Microsoft.
- 2Confirm that the requested feature is inventory or review only.
- 3Check what metadata the app stores and for how long.
- 4Verify that no file moves without your explicit approval.
- 5Revoke access after use if ongoing connection is unnecessary.
Understand the situation
A permission label describes technical access, not the provider’s entire security posture. Review the exact scope, token handling, retention, operator access, and purpose of every data field before connecting an account.
Use a controlled workflow
Check what access an app requests and why. The scan should only read, nothing should move without your explicit approval, and a report-only workflow should remain possible.
Make the final decision
Let the scan only read, then require explicit approval before the service modifies any reviewed item. The backend must enforce that approval rather than relying on hidden UI state.
Metadata is not harmless just because it excludes file bodies. Names, paths, sizes, account IDs, and sharing state can reveal sensitive business or personal context and need deliberate protection.
Limits and risks to check
- — Read access can still expose sensitive metadata or file bodies if the app requests them.
- — Consent wording varies by account and scope.
- — Client-side token exposure can undermine an otherwise narrow scope.
- — A token with write access needs strict server-side protection.
Official references
Frequently asked questions
Can a read-only app delete my files?
A read scope itself does not authorize deletion. The implementation and backend should also enforce that no write token is present.
Can it see filenames?
Yes, if the granted file-read scope returns the drive items needed for the feature.
Why would write access ever be needed?
Only to modify files you approved. No file should move before you review and approve it.
Scan first. Decide with evidence.
ClearCopies reads supported cloud-drive metadata and groups exact copies by byte size plus a provider-supplied content fingerprint. Original file bodies are not downloaded for the scan. You review the result and export a plan before any file moves.