How are we doing? Please help us improve Microsoft Azure. Take our short survey

Questions tagged [azure-ad-graph-api]

Use this tag for Azure AD Graph API (see link [1] in details below) related questions (not Microsoft Graph). The Azure Active Directory Graph API provides programmatic access to Azure AD through REST API endpoints. Applications can use the Graph API to perform create, read, update, and delete (CRUD) operations on directory data and objects

Filter by
Sorted by
Tagged with
0 votes
1 answer
23 views

Why I can't add TeamSettings.ReadWrite.All when I have AzureADandPersonalMicrosoftAccount App

I'm facing a problem where I can't add the TeamSettings.ReadWrite.All permission to my app registered in Azure AD which also supports Personal Microsoft Accounts. Despite having the necessary admin ...
abdo's user avatar
  • 25
0 votes
1 answer
72 views

Return customers with a null custom extended property using Microsoft Graph API

I would like to return a list of customers that's extended property is undefined but can't seem to find a way to do it. I have tried using "$filter=myExtendedPropName eq null" and "$...
LucasMarshall's user avatar
0 votes
1 answer
120 views

Reading/Downloadind an excel file from my organization sharepoint with Python

I'm trying to read/download an excel file from a shared folder in my organization's sharepoint. At the moment, I have an Azure AD Application that I am trying to use to authenticate the access. I am ...
Tamara Dominguez Poncelas's user avatar
0 votes
1 answer
54 views

Why without Consent AzureAD Application Refresh Token gets delivered

Trying to get an access_token and refresh_token in a test-setup. For this I am doing an oauth2 call with help of https://login.microsoftonline.com/{{ Tenant-ID }}/oauth2/v2.0/authorize?...... and ...
Maik Brauer's user avatar
0 votes
0 answers
59 views

Azure B2C Force Password Reset After X Number of Days

Using the following Docs I've setup an Azure B2C to force password reset after 1 Day. https://learn.microsoft.com/en-us/azure/active-directory-b2c/force-password-reset?pivots=b2c-user-flow#password-...
aherrick's user avatar
  • 19.9k
0 votes
2 answers
80 views

Reading Azure directory roles (built in roles) via Graph API

Is there any way to see which Azure directory roles (built-in roles) a user is assigned to? I need the information we get when we find the user and go to "Assigned Roles". I've tried to find ...
rafal fraczek's user avatar
0 votes
0 answers
34 views

Entra Inbound Provisioning API not setting accountexpiry for on-premise AD

I am using Entra Inbound Provisioning API to add new user on-premise. I can successfully add a user, but I'm unable to set the accountexpire attribute. Below is the link that I have followed to ...
Piyush's user avatar
  • 359
0 votes
0 answers
90 views

InvalidImage Microsoft Graph API 400 error

When making a put or patch request as specified in the docs, in order to update a team image, I get a 400 error. I am passing a valid binary as my request body in a JSON format: { "photo": &...
Demian Licht's user avatar
0 votes
0 answers
31 views

From Teams Bot Channel, We are getting null pointer exception because card data is not posted back to server

Using Teams Channel, we are using adaptive card which sends data and invoke another adaptive card using refresh card. This was working earlier as expected and suddenly this process broke where refresh ...
V Yadav's user avatar
  • 31
0 votes
1 answer
44 views

What is the most granular/secure permission to get users/user lastSignInDateTime property?

I am looking at collecting some data about m365 users in the graph api. I am looking to also select the user/users lastSignInDateTime property which is in the auditlog file. I do not want/need to give/...
Tim Whatley's user avatar
1 vote
1 answer
151 views

Azure Web App uses Azure Authentication to access the web app, how do I use this to display the email address of the user accessing the app?

I am currently developing an Azure Web App with Python, it uses Azure AD Authentication for site access. I want to display the current users email (I plan to use this later for access tiers also). I ...
Metel Stairs's user avatar
0 votes
2 answers
141 views

Invalid client secret provided MS Identity

Trying to sign in users in my blazor server app via Microsoft Identity platform. I created a client scret, which is stored in secrets.json. Still it's giving me the above error: AADSTS7000215: Invalid ...
bbWebDev's user avatar
0 votes
1 answer
69 views

is there a way to get on-premises sid for Azure hybrid joined device in Microsoft graph?

I am trying to get the on-premises Security Identifier (SID) for hybrid joined devices, I have tried going through Microsoft Graph Documentation but I can only find the User SID, is there a way to ...
Igal Flegmann's user avatar
0 votes
1 answer
137 views

AzureAD - MS Graph - New-MgApplicationOwnerByRef Powershell cmd-let problem

I am preparing automation for Azure Entra ID (Azure AD) service. I need to add SPN to Ownets of this Registered Application (pls see the screenshot). From Azure Portal GUI there is no option to do it,...
tester81's user avatar
  • 555
0 votes
1 answer
131 views

Unable to access a Sharepoint File from a publicly shared URL using Microsoft Graph API

I am trying to build an application where I want to read the MS Excel file from the "Anyone can view and Edit" URL entered by the user (without signing in). My initial plan was to create an ...
Yash Sethia's user avatar
0 votes
1 answer
197 views

Sharepoint Rest API office365 library 403 Client Error

I am trying to access a Sharepoint folder and retrieve the files within. With the following code: # Import libraries from office365.sharepoint.client_context import ClientContext from office365....
ooalgomaniac's user avatar
0 votes
0 answers
170 views

Azure AD B2C keeps asking user to enroll in MFA even if they are excluded from Conditional access policy

I have an asp.net 4.8 web application integrated with Azure AD B2C. External users will use local account in B2C tenant Internal company users will use their own Azure AD access to log in to the ...
Haitham Shaddad's user avatar
0 votes
1 answer
315 views

Graph API Permission Sites.Selected Permission is not working for subsites

My SharePoint logical url is like below https://mysite.sharepoint.com/sites/parent/child/grandchild where each site is a subsite of its parent. i.e parent is a subsite of mysite child is a subsite of ...
imran chowdhury's user avatar
1 vote
2 answers
153 views

Azure App Registration get Date of consent given for multi tenant app

I have a multi tenant app running and received a request from a "customer" where he claims that he never gave consent to my terms of service and privacy statement. While I claimed that since ...
Agyss's user avatar
  • 338
0 votes
1 answer
191 views

Azure Graph API Trigger 2FA/MFA Auth Request

Using Azure Graph API how do I trigger a 2FA push? For example, Duo has an API /auth/v2/auth which triggers a push/SMS/phone call/passcode request to a user. https://duo.com/docs/authapi#/auth Twilio ...
Victorio Berra's user avatar
0 votes
0 answers
106 views

Cant Download Outlook Attachment content with Microsoft Graph Api through powershell

I am a relatively new jr. systems administrator, so please feel free to let me know if I'm doing anything out of the ordinary with the way I'm making these API requests. I am attempting to download ...
Baedroch's user avatar
1 vote
1 answer
65 views

How to authenticate and list users / run different graph ql api's using Microsoft graph API

I've created an enterprise application /application registration in azure cloud console . And created web credentials client secret. https://learn.microsoft.com/en-us/azure/active-directory/manage-...
Mozhi's user avatar
  • 777
0 votes
1 answer
115 views

Azure Graph API - Application permisisons to update global admin user properties

I have Azure application/secret and want to update user properties, some users are Global admins, permisisons are as in picture below: For users who are global admins Azure application can update Job ...
overflowed's user avatar
  • 1,107
0 votes
0 answers
100 views

Create and manage marketplace managed application Azure B2C tenant in bicep

I'm currently working on Azure Marketplace app. So far, I was able to remodel all of the required infrastructure resources using bicep, unfortunately I hit the wall when trying to create a managed B2C ...
user1013607's user avatar
0 votes
1 answer
121 views

Is getting a blank window normal when making a graph API call?

Using Graph API 5 and Azure Identity App Registration Details: -- Platform Configuration: Native Client -- Allow Public Client Flows = "yes" -- Delegated permissions: Files.ReadWrite.All, ...
ezG's user avatar
  • 411
0 votes
1 answer
40 views

Value cannot be null. (Parameter 'headers') when calling ConsentHandler.HandleException

I am making a call to get user details from the Microsoft Graph API in a Blazor server application. To ensure the token is up to date I am catching any exception and passing this to the ConsentHandler....
MatthewHall3D's user avatar
0 votes
1 answer
96 views

Azure Service Principal rotation (Graph API permission to managed identity)

My end goal is to be able to rotate SPN secrets and add the new secret to Keyvault. I thought of using Azure Automation account runbooks to do it. However, I think the managed identity of the ...
Deep's user avatar
  • 1
0 votes
1 answer
150 views

How to Retrieve Basic Information in Application Proxy SSL Certificate using Graph API?

I am able to retrieve most of the information from the Azure Portal using the Graph API through a PowerShell script with the Invoke-RestMethod such as basic information (name, certificate thumbprint ...
kila's user avatar
  • 3
0 votes
0 answers
142 views

GeneralException Message: An error occurred sending the request

I have used Asp.net core 6 with OpenIdConnectDefaults.AuthenticationScheme Authentication include MicrosoftGraph. It is working fine when first time we login on the web application. But If user login ...
Ankur Gupta's user avatar
0 votes
1 answer
168 views

How implement Graph API beta in ASP.NET Core App

The following code (.NET 6) works with Graph v1.0. using Azure; using Azure.Identity; using Azure.Security.KeyVault.Secrets; using Microsoft.AspNetCore.Authentication.OpenIdConnect; using Microsoft....
codeNightmare's user avatar
0 votes
0 answers
175 views

Powershell - Download OneDrive files for all users using Graph

I am trying to use Graph to list all users in my M365 tenant, look at a folder within their OneDrive, and then download the contents Each user has the same folder inside OneDrive "Custom Export&...
John Johnson's user avatar
0 votes
2 answers
86 views

How to retrieve authentication/emailmethods values of a user using Microsoft Graph SDK?

I'm retrieving the users from Azure AD with the following code. I want to retrieve the authentication\emailmethods and the email address. I set up the API Permissions as mentioned on this page. ...
wonderful world's user avatar
1 vote
1 answer
187 views

Custom Azure AD Role or Azure Policy to allow only Microsoft Graph User.Read.All permission to Azure Service Prinicpal

Use Case - Automate assigning Microsoft Graphs's User.Read.All permission to App Registration/Service Principal using DevOps pipeline. So that applications can read user profiles. Challenge To grant ...
BreakHead's user avatar
  • 10.5k
0 votes
1 answer
174 views

Kusto Query - Get a list all Security Recommendations groupedby Resource Groups

Kusto Query - Get a list all Security Recommendations groupedby Resource Groups, via Azure Graph Explorer. Link the types : type == 'microsoft.resources/subscriptions/resourcegroups' and type == '...
Edwin Orina's user avatar
0 votes
1 answer
80 views

[Migrate from Azure AD Graph to Microsoft Graph]: how to get the parameters to use the Microsoft Graph API

We want to migrate our .NET app from using Azure AD Graph to Microsoft Graph API. Currently we're using the package Microsoft.WindowsAzure.ConfigurationManager and getting the parameters required for ...
Kotana Sai's user avatar
  • 1,349
0 votes
1 answer
139 views

Scoping Graph Permissions to specific objects

does someone know if it's possible to scope Graph Permissions to specific objects? We know that there are Exchange Online Application Access Policies (https://learn.microsoft.com/en-us/graph/auth-...
Theragus's user avatar
0 votes
0 answers
66 views

Issues with Microsoft Teams Widget Permissions using Graph API

I'm working on a Microsoft Teams Widget development project that involves utilising the Graph API. I've identified that I require some specific permissions to access assignments. To facilitate this, I ...
SZ.'s user avatar
  • 25
0 votes
2 answers
746 views

Updating properties in Azure AD while using directory sync from on-premise

We have a setup with multiple on-premise domains, which all synchronize to a common Azure AD. The problem now is that we have people in one domain that are managers of people in other domains. When ...
sorenchristensen's user avatar
0 votes
1 answer
69 views

How to set name suffix when creating a contact via Microsoft Graph API?

In Outlook you can set a name suffix when creating a contact (see screenshot): Is it possible to set this property via Microsoft Graph API? I don't find a matching property in the documentation: ...
Tobias's user avatar
  • 21
0 votes
1 answer
37 views

Microsoft GraphAPI 403 on authentication methods ( Node - @azure/msal-node package )

I am trying to get the authentication methods for a user, in my scopes, I have tried 'https://graph.microsoft.com/.default' which gives me the 403 error, I have Delegated permissions of: User.Read, ...
Tim Holum's user avatar
  • 697
0 votes
1 answer
125 views

Create a user in AAD B2C

I'm working on an SPA/Web API app and using AAD B2C for user authentification. As a feature, I want to let the user create users accounts from the app UI and I have planned to use the Microsoft Graph ...
user avatar
-1 votes
1 answer
26 views

Azue AD - How to re-enable user, assign password, convert shared mailbox to regular mailbox

We have a requirement to automate re enabling the rehired users in azure active directory. Upon rehirig the employee into the company, we need to enable his/her account and assign a password to let ...
vallamreddyvenu's user avatar
3 votes
0 answers
158 views

Initializing Video call from bot with ability to share screen in Bot Framework using Graph Api

Background I am developing a bot that will have the ability to initiate a call between 2 people. In the current ability of the app, it is able to initiate calls between User A and User B. When the ...
IAM5K's user avatar
  • 255
0 votes
1 answer
152 views

Azure AD App registration Graph API does not have permission to write to MS Teams

I want to send a message to certain team and channel in Microsoft Teams through Graph API. I registered my application on Azure Active directory and added multiple permissions. Additonally, I was ...
fcuic's user avatar
  • 37
-1 votes
2 answers
95 views

How to fix error : AADB2C90304: Claims exchange with id 'LocalAccountSigninEmailExchange' could not be found in orchestration step '2'

I am creating users using Microsoft Graph API as follows. var userToAddToAAD = new User { AccountEnabled = true, DisplayName = $"{firstName} {lastName}", MailNickname = $"{...
Piyumi Nadeeshani's user avatar
4 votes
2 answers
177 views

Isomorphic-fetch not found on Azure Deployment for MS Teams Bot using graph API

We are creating an application on Microsoft Bot Framework for Microsoft Teams. This app uses isomorphic fetch to make graph API calls for handling user call-related API. After importing the isomorphic ...
IAM5K's user avatar
  • 255
0 votes
1 answer
43 views

Unable to track changes of deleted and modified mail folders using Graph API

am using graph api to synchronize user's mails and mail folders to the application. Earlier the application uses EWS for synchronization. So when the scheduler runs, the console application will fetch ...
Lavanya Senthilkumar's user avatar
0 votes
2 answers
50 views

Archive Tams using Graph Api MethodNotAllowed (405)

I create an Azure Active Directory (AAD) group, and then based on that group, a Teams team is created, all using the Graph API, and it works fine. But when I try to call the method to archive that ...
Karol karol's user avatar
0 votes
2 answers
249 views

How can we retrieve list of Azure AD Administrator using Azure Logic App?

I am working on a scenario where I need to fetch the list of users having admin access (Global Administrator) permission on Azure AD and send them an email. However, when I started working on it I ...
SRP's user avatar
  • 1,059
2 votes
0 answers
102 views

Is it possible to use a webhook connection for teams to edit/update message? [closed]

I have a strange question. I am currently using an incoming webhook in my function app to connect to the channel in Microsoft Teams. For now, I can only add messages or cards, but I want to be able to ...
alihasan's user avatar

1
2 3 4 5
39