Comments on: How to Figure Out What Microsoft Graph Permissions You Need https://practical365.com/microsoft-graph-api-permission/ Practical Office 365 News, Tips, and Tutorials Thu, 25 Apr 2024 08:15:15 +0000 hourly 1 https://wordpress.org/?v=6.6.1 By: Khanh Le https://practical365.com/microsoft-graph-api-permission/#comment-292958 Thu, 25 Apr 2024 08:15:15 +0000 https://practical365.com/?p=55808#comment-292958 Hi Tony
I consent single user using powershell with 3 permissions: openid, email, offline_access. However, now I want to use the command and remove 1 of the 3 above pemission for that user, how do I do it?

]]>
By: <div class="apbct-real-user-wrapper"> <div class="apbct-real-user-author-name">Tony Redmond</div> <div class="apbct-real-user-badge" onmouseover=" let popup = document.getElementById('apbct_trp_comment_id_289952'); popup.style.display = 'inline-flex'; "> <div class="apbct-real-user-popup" id="apbct_trp_comment_id_289952"> <div class="apbct-real-user-title"> <p class="apbct-real-user-popup-header">The Real Person!</p> <p class="apbct-real-user-popup-text">Author <b>Tony Redmond</b> acts as a real person and passed all tests against spambots. Anti-Spam by CleanTalk.</p> </div> </div> </div> </div> https://practical365.com/microsoft-graph-api-permission/#comment-289952 Mon, 11 Mar 2024 06:11:23 +0000 https://practical365.com/?p=55808#comment-289952 In reply to Zain.

It’s explained in the article.

]]>
By: Zain https://practical365.com/microsoft-graph-api-permission/#comment-289951 Mon, 11 Mar 2024 06:05:24 +0000 https://practical365.com/?p=55808#comment-289951 In reply to Tony Redmond.

Thank you for your response Tony.
Yes I’m trying to fetch specific user’s data for a project. Can you please explain the application permission thing as I’m new to it or you may refer to some post or blog.

]]>
By: Tony Redmond https://practical365.com/microsoft-graph-api-permission/#comment-289950 Mon, 11 Mar 2024 06:01:10 +0000 https://practical365.com/?p=55808#comment-289950 In reply to Zain.

Are you trying to access someone else’s account? If so, you need application permission, not the delegated permission assigned by default.

]]>
By: Zain https://practical365.com/microsoft-graph-api-permission/#comment-289949 Mon, 11 Mar 2024 05:56:28 +0000 https://practical365.com/?p=55808#comment-289949 Hi Tony! Thank you for a great description!
I’m executing Graph API “https://graph.microsoft.com/beta/users” using power automate workflow and it works fine. But when I try to filter my data i.e, “https://graph.microsoft.com/beta/users?$filter=mail eq ‘xyz@email.com'”, it throws an error saying “Insufficient privileges to complete the operation”. Kindly guide me in this regard. Thanks.

]]>
By: <div class="apbct-real-user-wrapper"> <div class="apbct-real-user-author-name">Tony Redmond</div> <div class="apbct-real-user-badge" onmouseover=" let popup = document.getElementById('apbct_trp_comment_id_287698'); popup.style.display = 'inline-flex'; "> <div class="apbct-real-user-popup" id="apbct_trp_comment_id_287698"> <div class="apbct-real-user-title"> <p class="apbct-real-user-popup-header">The Real Person!</p> <p class="apbct-real-user-popup-text">Author <b>Tony Redmond</b> acts as a real person and passed all tests against spambots. Anti-Spam by CleanTalk.</p> </div> </div> </div> </div> https://practical365.com/microsoft-graph-api-permission/#comment-287698 Fri, 16 Feb 2024 18:24:21 +0000 https://practical365.com/?p=55808#comment-287698 In reply to Rahul.

Given that I can’t see what’s happening in your tenant, you should file a support call with Microsoft and have them check things out.

]]>
By: Rahul https://practical365.com/microsoft-graph-api-permission/#comment-287694 Fri, 16 Feb 2024 17:56:49 +0000 https://practical365.com/?p=55808#comment-287694 In reply to Tony Redmond.

Thanks, Tony for your quick responses, yes initially I thought so, but this user can delete dataset where it has no access.

]]>
By: Tony Redmond https://practical365.com/microsoft-graph-api-permission/#comment-287691 Fri, 16 Feb 2024 17:37:14 +0000 https://practical365.com/?p=55808#comment-287691 In reply to Rahul.

https://learn.microsoft.com/en-us/powershell/module/microsoftpowerbimgmt.profile/invoke-powerbirestmethod?view=powerbi-ps documents the cmdlet as a helper function to run a BI command using the signed-in profile. That sounds like the account is able to work with the data they have access to and is able to delete a dataset. Have you tried to run the cmdlet and attempt to delete a dataset that the user can’t access?

]]>
By: Rahul https://practical365.com/microsoft-graph-api-permission/#comment-287689 Fri, 16 Feb 2024 17:28:21 +0000 https://practical365.com/?p=55808#comment-287689 In reply to Tony Redmond.

If user can run below command,
Invoke-PowerBIRestMethod -Url ‘groups/{groupid}/datasets/{datasetid}’ -Method DELETE, which means a user got the permission scope – Dataset.ReadWrite.All.

So, if I want to know, who all users can do this.

]]>
By: Tony Redmond https://practical365.com/microsoft-graph-api-permission/#comment-287688 Fri, 16 Feb 2024 17:17:49 +0000 https://practical365.com/?p=55808#comment-287688 In reply to Rahul K.

What do you mean API permissions a user has?

]]>