Is it possible to restrict the information returned from an MS Graph query?

mh 1 Reputation point
2021-04-20T23:55:08.69+00:00

I would like my application to use MS Graph to query fields from users in a specific AD group, but due to security requirements, I want the application to only have authorization to be able to see a subset of those fields. Is it possible to configure Active Directory/MS Graph access to make this possible?

I found a question on stackoverflow that is very similar to mine :

https://stackoverflow.com/questions/63705308

The answers suggest that this is not possible, but I would like to confirm.

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,662 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,576 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vasil Michev 95,666 Reputation points MVP
    2021-04-21T06:53:16.793+00:00

    Still not possible afaik, sorry. Best you can do currently is use a restricted scope such as User.ReadBasic.All, assuming this includes all the attributes you need to work with.

    0 comments