I'm currently working on a project for my work, and I intend to use Microsoft's planner API to help. I have granted the permission of Group.Read.All, and I get a warning of "Not granted for ". I've tried using my personal microsoft account to create the API, and attempted to access a planner created by me on that personal account as what I am accessing, and I get the same "permission denied error". How can I fix this?
Related
I am trying to get the category names/colours via the API for a user other than myself, the documentation says it is possible, see image below, but returns "Access is denied. Check credentials and try again." even though I do have permission to that mailbox.
Seem this question was also asked almost 3 years ago with no answer, guessing the API documentation describes a scenario that the developers forgot to program for???
Previous posting of the same question
Here is the full request and showing the permissions are allowed.
You can't do it using delegate permissions because there is no MailboxSetting.ReadWrite.Shared permission so that endpoint can only be used to access the current users Mailbox setting when using delegate permission. You an use Application Permissions and the Client Credential flow https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow if you need to limit the scope of your application to a number of Mailboxes you can do that as well https://learn.microsoft.com/en-us/graph/auth-limit-mailbox-access
I am creating the shareable links through Microsoft Graph API by following this documentation
https://learn.microsoft.com/en-us/graph/api/driveitem-createlink?view=graph-rest-1.0&tabs=http
The response I am getting is
#<HTTParty::Response:0x563ee09ce0d0 parsed_response={"error"=>{"code"=>"accessDenied", "message"=>"Account Upgrade is required for this operation.", "innerError"=>{"code"=>"accountUpgradeRequired", "date"=>"2020-07-13T05:17:42", "request-id"=>"abc-request-id"}}}
Steps I've done to solve this
I've upgraded account from trial to paid
I've granted the application and delegated full permissions of Sites and Files
I'm trying to access a group calendar using the microsoft graph api as the application (I don't want to use delegate permissions).
If I request calendar events using the below I get the events for the user just fine.
https://graph.microsoft.com/v1.0/users/[emailAddress]/events
If I make a request to the following I get group information:
https://graph.microsoft.com/v1.0/groups/[groupId]/
If I make a request to this:
https://graph.microsoft.com/v1.0/groups/[groupId]/events
I get "Access is denied. Check credentials and try again."
In azure portal, I've given my app service the following Application permissions:
Calendars.Read
Calendars.Read.Shared
Group.Read.All
User.Read.All
What am I missing?
Applications permissions to list events is currently not supported. Also, listing events using delegated permissions with a Personal accounts is not supported. Please refer to List Events documentation which has the details. You can also refer to known limitations of Graph here.
A user voice on this feature request is also available here and you can upvote the same so that the product team can include into their plans.
After clicking on "authorize using your own account" and logged in with my work account (I'm a Microsoft employee, so I meant my Microsoft email), I got the error "OAuth Sandbox needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it."
I have contacted Microsoft IT, but they told me to contact the app owner here. Here is the details:
Request Id: 6462a541-01d1-4899-84f9-6b77c3423200
Correlation Id: 9e8d35bd-f719-4422-ab97-941680b32b58
Timestamp: 2019-01-25T00:40:25Z
Message: AADSTS900941: An administrator of Microsoft has set a policy that prevents you from granting OAuth Sandbox the permissions it is requesting. Contact an administrator of Microsoft who can grant permissions to this application on your behalf.
Advanced diagnostics: Disable
If you plan on getting support for an issue, turn this on and try to reproduce the error. This will collect additional information that will help troubleshoot the issue.
I believe Microsoft IT is asking you to reach out to the app owner on stackoverflow.microsoft.com, not on the public stackoverflow site. You should delete this message.
You need to find the owner of that page, presumably the outlook team, and have them request Microsoft IT allow their AAD AppId 32613fc5-e7ac-4894-ac94-fbc39c9f3e4a.
Can't get access to the findMeetingTimes endpoint in graph api.
I can list all users events, but when trying to use the findmeetingtimes endpoint
I'm getting "Access is denied. Check credentials and try again.".
Is there a way to get access with app-only permissions?
or is it a bug?
https://github.com/microsoftgraph/microsoft-graph-docs/issues/559
No, not at this time. This is in our backlog to enable, but it isn't working today. Unfortunately I can't give a timeline on this, but I'll update this answer once we turn it on.
I know this is an old question but it appears the restriction is still in place for Graph API (both v1.0 and beta) but this is not longer the case for Outlook Calendar REST API (v2.0).
In that you can use the following and get results
https://outlook.office.com/api/v2.0/users/{{any#yourdomain.com}}/findmeetingtimes
Whereas https://graph.microsoft.com/v1.0/users/{{any#yourdomain.com}}/findmeetingtimes still gives "Access is denied. Check credentials and try again."