14,179 questions with Microsoft Security | Microsoft Graph tags

Sort by: Updated
1 answer

Microsoft Graph DriveItem permissions no longer returning `link.webUrl`

I’m working on a personal project that integrates with Microsoft Graph to inspect sharing permissions for OneDrive/SharePoint DriveItems. Previously, when retrieving permissions for a DriveItem using: GET…

Microsoft Security | Microsoft Graph
asked 2026-09-03T09:46:43.4733333+00:00
Pranil Shrestha 0 Reputation points
commented 2026-09-04T05:17:45.71+00:00
Pranil Shrestha 0 Reputation points
0 answers

Microsoft Graph Access Token Rejected with IDX14100 Despite Valid OAuth Token Response

Issue Summary We are integrating Microsoft Graph Calendar APIs using Microsoft Entra ID OAuth 2.0. Our application uses the /common authority because we need to support both personal Microsoft accounts and organizational Microsoft 365 accounts. The OAuth…

Microsoft Security | Microsoft Graph
asked 2026-09-04T04:29:35.1233333+00:00
Navaneeth V 0 Reputation points
edited the question 2026-09-04T04:33:50.9533333+00:00
Navaneeth V 0 Reputation points
0 answers

How can a Tenant admin programmatically enumerate exact permissions requested by a newly created multitenant service principal before consent?

I’m trying to understand the exact Microsoft Entra / Microsoft Graph object model for reviewing permissions on an external multitenant application before granting tenant-wide admin consent. Scenario: Tenant A is the publisher/home tenant. Tenant A…

Microsoft Security | Microsoft Graph
asked 2026-09-04T00:15:07.1666667+00:00
Raghav Thapa 0 Reputation points
edited the question 2026-09-04T02:17:28.5133333+00:00
Raghav Thapa 0 Reputation points
0 answers

How can a delegated app distinguish a room mailbox calendar from a user's calendar in GET /me/calendars?

We are building a scheduling application. After a user connects their Outlook calendar with delegated permissions (offline_access, User.Read, Calendars.ReadWrite), we list the calendars the user has added and offer the people among them as suggestions.…

Microsoft Security | Microsoft Graph
asked 2026-09-03T08:42:25.94+00:00
Shota Daido 0 Reputation points
0 answers

POST /me/onenote/sectionGroups/{id}/sections — 403/40004 with Notes.ReadWrite (Delegated) on SharePoint-backed notebook

I have a confirmed delegated token with Notes.ReadWrite in the scp claim. According to the v1.0 documentation, this is sufficient for POST /me/onenote/sectionGroups/{id}/sections (work/school account, delegated). The API returns 403 / error.code 40004…

Microsoft Security | Microsoft Graph
asked 2026-09-03T06:02:24.9366667+00:00
Aditya Jahagirdar 0 Reputation points
1 answer

Microsoft Graph API - /sendMail and /messages endpoints returning 500 error

In Python where "shared_email_address" is an email address to which access has already been configured. This code has been working for months on end, but started to hit the 500 error on 8/31/2026, so I want to determine if there are any known…

Microsoft Security | Microsoft Graph
asked 2026-09-01T17:43:36.1166667+00:00
Jones Neil - Cincinnati-AMIG 0 Reputation points
answered 2026-09-01T18:04:02.2033333+00:00
Vasil Michev 127.8K Reputation points MVP Volunteer Moderator
1 answer One of the answers was accepted by the question author.

How to setup Jira Cloud Graph Connector to enable Write Permissions?

Hi, I wanted to setup the Jira Cloud Connector as per https://learn.microsoft.com/en-us/microsoftsearch/jira-connector Now I thought I could give the App in Atlassion DevCenter more permissions and use them, so I enabled some Write permissions. But even…

Microsoft Security | Microsoft Graph
asked 2025-04-14T09:30:24.4433333+00:00
Anonymous
commented 2026-09-01T06:18:40.7133333+00:00
JuliaMarvin 22,015 Reputation points Volunteer Moderator
1 answer One of the answers was accepted by the question author.

Microsoft Graph returns 401 for /me/calendars with delegated Calendars.ReadBasic on personal Microsoft account

App configuration Supported account type: Personal accounts only Public client / device-code authentication Authority: consumers Delegated Microsoft Graph permission: Calendars.ReadBasic only No client secret or certificate Observed behavior …

Microsoft Security | Microsoft Graph
asked 2026-08-25T02:02:49.7433333+00:00
Peter Holdorf 20 Reputation points
edited a comment 2026-08-31T15:23:47.37+00:00
Peter Holdorf 20 Reputation points
1 answer

opt-out passkeys for September 1st

Having issues with opt-out of passkeys commands using powershell 7 .. cannot successfully run the Invoke-MgGraphRequest -Method PATCH -Uri "https://graph.microsoft.com/beta/policies/authenticationMethodsPolicy" -Body $body -ContentType…

Microsoft Security | Microsoft Graph
asked 2026-08-28T17:15:33.8866667+00:00
Thomas Wrobel 0 Reputation points
answered 2026-08-31T11:18:37.56+00:00
Konstantinos Lianos 825 Reputation points Student Ambassador
1 answer

Graph sensitivity labels seem frozen

Since around 20 August, Microsoft Graph has served a frozen snapshot of my tenant's sensitivity labels and has not reflected a single change since, in any direction. Labels created and published after that date never appear (404 on a single GET, and 400…

Microsoft Security | Microsoft Graph
asked 2026-08-29T17:04:03.7066667+00:00
Luca Mitas 0 Reputation points
answered 2026-08-29T17:22:47.36+00:00
Vasil Michev 127.8K Reputation points MVP Volunteer Moderator
1 answer One of the answers was accepted by the question author.

How do I change the iconColor of a Sharepoint GraphAPI.DriveItem

From Sharepoint, a user is able to set the color of a folder, eg: From GraphAPI, the DriveItem shows this color: https://graph.microsoft.com/v1.0/drives/<driveid>/items/<itemid> Attempting to patch this value: {"decorator":…

Microsoft 365 and Office | SharePoint | For business | Windows
Microsoft Security | Microsoft Graph
asked 2023-11-23T22:08:26.0666667+00:00
Martin Clarke 40 Reputation points
commented 2026-08-28T13:47:32.6866667+00:00
1 answer

MS Graph API - Shifts Unpaid Breaks

When you create a Shift via Microsoft Teams, there is a field for an Unpaid Break in minutes. When this shift is retrieved via Microsoft Graph API, the Unpaid Break field is nowhere to be found. { "@odata.etag":…

Microsoft Teams | Development
Microsoft Teams | Development

Building, integrating, or customizing apps and workflows within Microsoft Teams using developer tools and APIs

5,063 questions
Microsoft Security | Microsoft Graph
asked 2021-07-13T21:18:23.467+00:00
Rishan Munasinghe 11 Reputation points
answered 2026-08-28T00:36:40.0533333+00:00
jw 5 Reputation points
1 answer

How to parse calendar events (IPM.Appointment) from Microsoft Graph Export API Fast Transfer Stream (FTS) format?

Service: Microsoft Graph API, Exchange Online, eDiscovery/Export. Scenario: We are trying to programmatically export and parse deleted calendar events (IPM.Appointment) that are residing in hidden Exchange hold folders (e.g., RecoverableItemsDeletions or…

Microsoft Security | Microsoft Graph
asked 2026-08-26T12:19:32.9133333+00:00
Aditya Varshney 0 Reputation points
answered 2026-08-27T18:01:03.34+00:00
Zoha Fatima 425 Reputation points
0 answers

Personal OneDrive: newly consented apps get 403 accessDenied / serviceReadOnly ("Database Is Read Only") on ALL drive endpoints, while an app consented months ago works for the same user at the same moment

Summary On personal Microsoft accounts (OneDrive Personal), any app registration whose delegated consent was granted today receives 403 accessDenied / innerError serviceReadOnly / message "Database Is Read Only" on every drive endpoint,…

Microsoft Security | Microsoft Graph
asked 2026-08-23T18:32:56.2933333+00:00
fangzhangmnm 0 Reputation points
commented 2026-08-27T16:59:17.44+00:00
Chao Liu 0 Reputation points
1 answer One of the answers was accepted by the question author.

Graph API Access to Transcripts Stopped Working After July 31, 2026 Policy Changes

Dear Teams, We are experiencing an issue with our application after the transcript access policy changes that took effect on July 31, 2026. Previously, our application was able to retrieve Microsoft Teams meeting transcripts successfully through…

Microsoft Security | Microsoft Graph
asked 2026-08-04T09:45:24.3266667+00:00
Wang, Qinjie 240 Reputation points
commented 2026-08-27T00:51:05.3033333+00:00
Chris Raffle 0 Reputation points
0 answers

Microsoft Graph OneNote API — PATCH content fails on any page containing a table

PATCH /me/onenote/pages/{id}/content reliably fails with error 20137 ("This page can not be PATCHed") for every page that contains an HTML <table> element anywhere in its content — including brand-new pages created moments earlier via…

Microsoft Security | Microsoft Graph
asked 2026-08-24T20:05:06.5566667+00:00
Phillip Wood 0 Reputation points
2 answers

How to Identify SharePoint permission changes using Microsoft Graph Delta without scanning every drive item?

Hi , We've requirement to implement an incremental SharePoint permissions extraction process using Microsoft Graph Delta and would appreciate some guidance on the recommended approach. Current implementation For each SharePoint site: Discover all…

Microsoft Security | Microsoft Graph
asked 2026-07-03T12:56:30.5666667+00:00
jaya krishna gonuguntla 40 Reputation points
answered 2026-08-24T15:51:42.65+00:00
Ryan Sullivan 0 Reputation points
0 answers

Microsoft Graph Calendars.ReadBasic returns 403 ErrorAccessDenied for personal Outlook account while Graph Explorer returns 200

We are implementing Microsoft Calendar availability sync for our web application, Groupbooka. We have a dedicated Microsoft Entra app registration: App name: Groupbooka Calendar Application (client) ID: fdb304b4-113d-4aab-a762-fc52b810c78d…

Microsoft Security | Microsoft Graph
asked 2026-08-22T20:37:41.89+00:00
Luke 0 Reputation points
0 answers

Microsoft Graph webhook subscriptions deliver duplicate notifications for the same message

We have a NestJS application that subscribes to Microsoft Graph webhooks for Outlook inbox messages using the /subscriptions endpoint with resource users/{email}/mailfolders('Inbox')/messages. We are consistently receiving duplicate webhook notifications…

Microsoft Security | Microsoft Graph
asked 2026-08-20T20:44:48.5666667+00:00
edited the question 2026-08-20T21:14:42.3766667+00:00
Clover-L 25 Reputation points Microsoft External Staff Moderator
0 answers

Using graph API to create calendar entries that are "Teams Meetings" in a shared calendar account, used to work but isn't now

I am using the graph API to create Calendar entries in a shared Outlook calendar account. These are working successfully. I have been successfully creating them as Teams Meetings - I have been seeing that when I create the entries and…

Microsoft Security | Microsoft Graph
asked 2026-08-20T16:19:47.0866667+00:00
Kevin Phillips 0 Reputation points