We are having issue in the Graph API delegation.
In aplication level- Graph API access used whch has ability to read all site collection document at tenant level
But here the user who does not have access to the site collection will be able to read or retrieve the confidential documents when they use GRAPH API
Delegation Level- When we try with Files.read.all, documents are getting downloaded from the site collection even who does have access to the library.
Is there any alternative way to overcome this?
