I'm trying to use the graph explorer to access the beta Office 365 usage reports. I can see that these report require the "Reports.Read.All" permission and I'm seeing that the account I'm using doesn't have that permission yet, but when I click on the "Modify your permissions" link it doesn't display this permission. How do you add this permission to an account, so that you can use the graph explorer with this API?
The reports.read.all permission has been added to the Graph Explorer code repository at https://github.com/microsoftgraph/microsoft-graph-explorer/commit/093600ec7bc7bd32befe5d118270ea71ca8008b4 and will be deployed to our website in the next update. We're working on a process to get new scopes added to the explorer automatically so we don't have this delay in the future.
You need to be an administrator to be able to consent to that permission scope
Related
i want to add a permission to a file on sharepoint online using the Microsoft Graph API.
the special thing is that i want to grant permission to the sharepoint group "visitors of ".
i think the possibility using https://learn.microsoft.com/en-us/graph/api/driveitem-invite?view=graph-rest-1.0&tabs=http is not successful.
thanks everyone
https://learn.microsoft.com/en-us/graph/api/driveitem-invite?view=graph-rest-1.0&tabs=http
tried this with different recipients and roles.
I am using the Graph API with app permission & with a certificate.
I know how to send emails with the sender which is different from the requestor's email.
I go to admin.exchange.com, select the user and add a mailbox delegation then add the user in "Send as".
My question is how to add user with "Send As" option via Graph API only.
I would like use this method microsoft permission: but from graph api
Thanks for your help
No this (and all the other Exchange Admin tasks) aren't currently in the Graph API, the only option for doing this programmatically is to use the Powershell cmdlets https://learn.microsoft.com/en-us/powershell/module/exchange/add-mailboxpermission?view=exchange-ps. The good news is that the v2 Powershell module does now support the client_credentials flow https://techcommunity.microsoft.com/t5/exchange-team-blog/modern-auth-and-unattended-scripts-in-exchange-online-powershell/ba-p/1497387
I'm trying to access a group calendar using the microsoft graph api as the application (I don't want to use delegate permissions).
If I request calendar events using the below I get the events for the user just fine.
https://graph.microsoft.com/v1.0/users/[emailAddress]/events
If I make a request to the following I get group information:
https://graph.microsoft.com/v1.0/groups/[groupId]/
If I make a request to this:
https://graph.microsoft.com/v1.0/groups/[groupId]/events
I get "Access is denied. Check credentials and try again."
In azure portal, I've given my app service the following Application permissions:
Calendars.Read
Calendars.Read.Shared
Group.Read.All
User.Read.All
What am I missing?
Applications permissions to list events is currently not supported. Also, listing events using delegated permissions with a Personal accounts is not supported. Please refer to List Events documentation which has the details. You can also refer to known limitations of Graph here.
A user voice on this feature request is also available here and you can upvote the same so that the product team can include into their plans.
I have an enterprise application which was registered in the Azure portal, the application is able to get an access token by issuing OAuth2.0 request, my question is what is the exact GET request it should send to start interacting with the OneDrive resource?
Should I register it under a specific AD group in order for it to have the right permissions? Please advise on how to get to a state where this app can interact with the OneDrive API, upload and get files from a specific location.
what is the exact GET request it should send to start interacting
with the OneDrive resource?
You can get started from the OneDrive API for Graph
Should I register it under a specific AD group in order for it to have the right permissions?
No need specific AD group. Just to grant the permission for Graph follow the following steps:
Navigate to your app in the add application list.
Click the Configure and then permissions under the API access.
Click the Add to add "Microsoft Graph".
Check the permission on SharePoint/OneDrive such as "Create, edit, and delete items and lists in all site collections/ Read and write user files/ Read user files" and then Save. Then click the Grant Permission to let the permission take effect.
I want to add Device.Read and Device.Command permissions to Graph Explorer. When I open the permissions and add them I'm told I need admin approval, although these specific permissions do not require approval. I want to add these permissions without taking away existing admin approvals. How do I do this?