Search endpoint returns "BadRequest" when searching for documents with an external user

Question

question

CloudBitsNL asked May 17, '21 saldana-msft edited 3 days ago

Search endpoint returns "BadRequest" when searching for documents with an external user

We want to let external users search for documents in our SharePoint.
For this we created a web API that gets an acces token (delegation) for MS Graph and executes the Search query.
This works fine for our own users but executing the query for external users (Guest users in our tenant) we get a BadRequest response.
The request we do:

 {
   "requests": [
     {
       "entityTypes": ["driveItem"],
       "query": {
         "queryString": "lorum path:\"https://mytenant.sharepoint.com/sites/subsite\""
       }
     }
   ]
 }

The BadRequest response we get

 {
   "error": {
     "code": "BadRequest",
     "message": "\r\n The call failed, please try again.",
     "innerError": {
       "date": "2021-05-17T10:27:49",
       "request-id": "SOME_ID",
       "client-request-id": "SOME_ID"
     }
   }
 }

I couldn't find anywhere if the call should work for external users. BadRequest responses often suggest that some incorrect permissions but we can't figure out what permissions we need to give.

Any information on this topic is welcome!

office-sharepoint-online microsoft-graph-search

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2021-05-18T04:20:43.007Z

MichaelHan-MSFT answered May 18, '21 Krasa edited Feb 10, '22

Hi @CloudBitsNL ,

Delegated permissions means that app would perform actions on behalf of the sign-in user. And I think it's the same as in SharePoint that MS Graph search is also not supported for external users.

As a workaround, you could use Application permissions to get the access token. This would work for you. https://docs.microsoft.com/en-us/graph/auth-v2-service

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Krasa · Feb 10 at 12:11 PM

The error message should be changed to something meaningful - or at least to something not totally misleading.

0 ·

Answer 2 · 2021-05-18T06:53:30.15Z

CloudBitsNL answered May 18, '21

Hi @MichaelHan-MSFT,

Thanks for your quick reply!

As a workaround we now use CSOM to search documents in a specific SharePoint site. This is works with delegated permissions and external users so the security trimming is handled by SharePoint.

We rather don't want to use Application permissions because that leeds to doing the security triming ourselves.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question