Graph API permissions issue

Question

question

JohnMcGuigan-2435 asked Mar 15, '22 CarlZhao-MSFT edited Mar 16, '22

Graph API permissions issue

Hi,

I am trying to get WorkingHours from Mailbox settings for my users. I have set the API permissions in Azure, and in Graph Explorer and if I run the below query with my email address it works fine. But as soon as I change the email address to one of my users it errors as per the screenshot. Both Azure and Explorer say I've consented so I'm a bit bemused.

https://graph.microsoft.com/v1.0/users/blah@blah.com.au/mailboxsettings/workinghours

To confuse things even more, if I use Connect-MGGraph with a certificate I can pull these details out for each person, but as I am doing this as part of a login script to update the Outlook signature the Connect-MGGraph option is not feasible.

microsoft-graph-applications microsoft-graph-permissions azure-ad-app-consent

graphexplorer-question.png (69.2 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-03-15T07:13:55.997Z

CarlZhao-MSFT answered Mar 15, '22 CarlZhao-MSFT edited Mar 16, '22

Hi @JohnMcGuigan-2435

Graph Explorer does not support calling the /users/{user id} endpoint, you can only use it to call the /me endpoint: me/mailboxsettings/workinghours.

The /users/{user id} endpoint is usually adapted to the application context, so you should grant your application the MailboxSettings.Read application permission in Azure AD, then use the client credentials flow to get the token and call the /users/{id|userPrincipalName}/mailboxsettings/workinghours api endpoint in postman.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

image.png (59.0 KiB)

2022-03-15-151929.png (87.1 KiB)

· 3

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JohnMcGuigan-2435 · Mar 15 at 08:25 PM

Hi

thanks for the response, the Azure consents have been granted. I can read the working hours etc from the Powershell Connect-MGGraph module, but I'll check my script that uses the API url and see if it is still erroroing.

1 ·

JohnMcGuigan-2435 · Mar 15 at 08:45 PM

Hi

Looks like it was the Graph Explorer error that was throwing me off track, have tried plugging the code into my script and it seems to be functioning. Now to see whether it still works as part of a logon script pushed via GPO.

1 ·

CarlZhao-MSFT JohnMcGuigan-2435 · Mar 16 at 01:24 AM

Hi @JohnMcGuigan-2435

Would you please provide us with an update on the status of your issue?

Please do not forget to "Accept Answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

0 ·

Answer 2 · 2022-03-15T07:24:19.82Z

michev answered Mar 15, '22

I seem to be able to reproduce this, let me see if I can bring some help.

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question