question

Chibu-3202 avatar image
0 Votes"
Chibu-3202 asked saldana-msft edited

creating classes with graph explorer for a Teams for education tenant

hello guys!,

I am faced with this issue, while using the graph API to create classes,
I consented to necessary permissions and tried using the graph explorer but keep getting this error.

I am trying to communicate with Microsoft teams for education using my enterprise application; getting, creating, updating and deleting, information (classes) data gotten from an AD -tenant with Team for education license.


Thanks in advance
93592-screenshot-5![93526-screenshot-61.png93604-screenshot-60.png5.png][1]


microsoft-graph-mailmicrosoft-graph-education
screenshot-61.png (108.3 KiB)
screenshot-60.png (112.2 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

DianaWanjuhi-1579 avatar image
0 Votes"
DianaWanjuhi-1579 answered Chibu-3202 commented

Hello @Chibu-3202 this error might indicate an issue with the permissions required to create a class. From the create class documentation, your application requires this permission: EduRoster.ReadWrite.All. You can check the permissions by clicking on the Access Token tab in Graph Explorer, then click on the {} which will open your token using jwt.ms. From there you can inspect the token and check the scp and confirm that this permission is present. If not, check your application on Azure AD and grant the permission. Please note that EduRoster.ReadWrite.All requires admin consent

Let me know if this helps and if you have further questions,

Diana.



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks so much@DianaWanjuhi-1579 for your response, it was helpful,
i have granted and consented to all necessary education permissions for my application on Azure AD.

Now the issue i get when i load my demo application, it says it cannot see the permission in my scope, AADSTS650053: The application 'graphapitest' asked for scope 'EduRoster.ReadWrite.All' that doesn't exist on the resource
using delegate authentication for my application,
Any ideas on what i can try next would be very helpful
P.S- i removed the secret to screenshot

94050-screenshot-68.png94091-screenshot-66.png94053-screenshot-63.png94054-screenshot-65.png


0 Votes 0 ·
screenshot-68.png (116.9 KiB)
screenshot-66.png (144.5 KiB)
screenshot-63.png (140.8 KiB)
screenshot-65.png (107.8 KiB)