14,186 questions with Microsoft Security | Microsoft Graph tags

Sort by: Updated
Updated Created Answers
0 answers

Does OneDrive Personal guarantee file-level optimistic concurrency with If-Match when updating existing file content?

I am implementing a process that updates existing files in OneDrive Personal using Microsoft Graph v1.0. The goal is to allow an update only if the eTag obtained when reading the target file still matches the target file's eTag when its content is…

Microsoft Security | Microsoft Graph
asked 2026-09-10T05:10:55.0533333+00:00
重信 葛西 0 Reputation points
1 answer

Managed dervices graph endpoint does not return hardware details

When calling the Graph API https://graph.microsoft.com/beta/deviceManagement/managedDevices?$filter=azureADDeviceId eq '{some intune id}' I receive a result with the filed HardwareInformation, but the values are empty or 0. I read that hardware…

Microsoft Security | Microsoft Graph
asked 2026-09-09T23:16:29.95+00:00
De Smedt Bert 0 Reputation points
answered 2026-09-09T23:26:40.72+00:00
De Smedt Bert 0 Reputation points
1 answer

PATCH /beta/admin/appsAndServices returns 204 No Content but never applies the settings

PATCH https://graph.microsoft.com/beta/admin/appsAndServices returns 204 No Content and the settings are never applied. A subsequent GET returns the old values indefinitely. The same two settings can be changed successfully by hand in the Microsoft 365…

Microsoft Security | Microsoft Graph
asked 2026-09-09T15:10:12.8233333+00:00
Esteban Ricalde 0 Reputation points
commented 2026-09-09T16:57:40.6+00:00
Vasil Michev 127.8K Reputation points MVP Volunteer Moderator
0 answers

Microsoft Graph app-only: link.webUrl omitted unless Sites.FullControl.All is granted

Our application uses Microsoft Graph with app-only authentication (client credentials) to retrieve sharing permissions for DriveItems stored in OneDrive for Business / SharePoint Online. We retrieve permissions using: GET…

Microsoft Security | Microsoft Graph
asked 2026-08-18T11:50:29.1266667+00:00
Saar Mansharov 5 Reputation points
edited a comment 2026-09-09T08:09:32.4566667+00:00
Ali Jone 60 Reputation points
0 answers

documentation invalid regarding users workhoursandlocation endpoint

so the documentation states application type permissions are not supported and if u call /users instead of /me u MUST use ur own id. both are wrong. https://graph.microsoft.com/v1.0/users/******@iact.nl/settings/workHoursAndLocations/recurrences as i am…

Microsoft Security | Microsoft Graph
asked 2026-09-09T07:28:25.95+00:00
Sil Loffeld 0 Reputation points
0 answers

Personal OneDrive: newly consented apps get 403 accessDenied / serviceReadOnly ("Database Is Read Only") on ALL drive endpoints, while an app consented months ago works for the same user at the same moment

Summary On personal Microsoft accounts (OneDrive Personal), any app registration whose delegated consent was granted today receives 403 accessDenied / innerError serviceReadOnly / message "Database Is Read Only" on every drive endpoint,…

Microsoft Security | Microsoft Graph
asked 2026-08-23T18:32:56.2933333+00:00
fangzhangmnm 5 Reputation points
commented 2026-09-08T10:51:13.8366667+00:00
Feng Ding 0 Reputation points
1 answer

How can I access a shared Sharepoint folder from GraphSDK?

Hi! So, I'm tasked with implementing a java code (for a web application) that will update some files on sharepoint when the user updates some data. I have been given access to a folder…

Microsoft Security | Microsoft Graph
asked 2026-08-07T19:22:42.6766667+00:00
Anderson 0 Reputation points
answered 2026-09-07T19:14:24.5166667+00:00
Azizkhon Ishankhonov 1,015 Reputation points
0 answers

What is the supported OnMessageSend pattern when updating and sending an Outlook draft through Microsoft Graph in New Outlook for Windows?

What is the supported OnMessageSend pattern when updating and sending an Outlook draft through Microsoft Graph in New Outlook for Windows? We are evaluating an Outlook Web Add-in using the Smart Alerts OnMessageSend event in New Outlook for Windows,…

Microsoft Security | Microsoft Graph
asked 2026-09-04T14:41:56.8933333+00:00
Nitin Chakre 0 Reputation points
edited the question 2026-09-07T04:31:40.9466667+00:00
Nitin Chakre 0 Reputation points
0 answers

Graph api create custodian 500 unexpected error

I’m encountering another issue with 500 internal server error code with lack of detail.   What fails POST /security/cases/ediscoveryCases/{caseId}/custodians Request body is exactly per the documentation: { "email": "<smtp>"…

Microsoft Security | Microsoft Graph
asked 2026-09-04T20:36:37.4166667+00:00
Oh, Jeongbin 0 Reputation points
edited the question 2026-09-04T20:37:59.7033333+00:00
Oh, Jeongbin 0 Reputation points
1 answer

How can a Tenant admin programmatically enumerate exact permissions requested by a newly created multitenant service principal before consent?

I’m trying to understand the exact Microsoft Entra / Microsoft Graph object model for reviewing permissions on an external multitenant application before granting tenant-wide admin consent. Scenario: Tenant A is the publisher/home tenant. Tenant A…

Microsoft Security | Microsoft Graph
asked 2026-09-04T00:15:07.1666667+00:00
Raghav Thapa 0 Reputation points
answered 2026-09-04T14:22:06.5733333+00:00
Vasil Michev 127.8K Reputation points MVP Volunteer Moderator
0 answers

Can Microsoft Graph auto-grant Sites.Selected access on the site created when provisioning an M365 Group?

We provision Microsoft 365 Groups programmatically via Microsoft Graph as part of a legal matter management system. Our app registration is scoped with Sites.Selected only (not tenant-wide Sites.ReadWrite.All), following least-privilege guidance. When we…

Microsoft Security | Microsoft Graph
asked 2026-09-04T09:32:12.63+00:00
Paulo Granja 0 Reputation points
2 answers

Microsoft Graph DriveItem permissions no longer returning `link.webUrl`

I’m working on a personal project that integrates with Microsoft Graph to inspect sharing permissions for OneDrive/SharePoint DriveItems. Previously, when retrieving permissions for a DriveItem using: GET…

Microsoft Security | Microsoft Graph
asked 2026-09-03T09:46:43.4733333+00:00
Pranil Shrestha 5 Reputation points
answered 2026-09-04T09:13:06.01+00:00
Pranil Shrestha 5 Reputation points
0 answers

Microsoft Graph Access Token Rejected with IDX14100 Despite Valid OAuth Token Response

Issue Summary We are integrating Microsoft Graph Calendar APIs using Microsoft Entra ID OAuth 2.0. Our application uses the /common authority because we need to support both personal Microsoft accounts and organizational Microsoft 365 accounts. The OAuth…

Microsoft Security | Microsoft Graph
asked 2026-09-04T04:29:35.1233333+00:00
Navaneeth V 0 Reputation points
edited the question 2026-09-04T04:33:50.9533333+00:00
Navaneeth V 0 Reputation points
0 answers

How can a delegated app distinguish a room mailbox calendar from a user's calendar in GET /me/calendars?

We are building a scheduling application. After a user connects their Outlook calendar with delegated permissions (offline_access, User.Read, Calendars.ReadWrite), we list the calendars the user has added and offer the people among them as suggestions.…

Microsoft Security | Microsoft Graph
asked 2026-09-03T08:42:25.94+00:00
Shota Daido 0 Reputation points
0 answers

POST /me/onenote/sectionGroups/{id}/sections — 403/40004 with Notes.ReadWrite (Delegated) on SharePoint-backed notebook

I have a confirmed delegated token with Notes.ReadWrite in the scp claim. According to the v1.0 documentation, this is sufficient for POST /me/onenote/sectionGroups/{id}/sections (work/school account, delegated). The API returns 403 / error.code 40004…

Microsoft Security | Microsoft Graph
asked 2026-09-03T06:02:24.9366667+00:00
Aditya Jahagirdar 0 Reputation points
1 answer

Microsoft Graph API - /sendMail and /messages endpoints returning 500 error

In Python where "shared_email_address" is an email address to which access has already been configured. This code has been working for months on end, but started to hit the 500 error on 8/31/2026, so I want to determine if there are any known…

Microsoft Security | Microsoft Graph
asked 2026-09-01T17:43:36.1166667+00:00
Jones Neil - Cincinnati-AMIG 0 Reputation points
answered 2026-09-01T18:04:02.2033333+00:00
Vasil Michev 127.8K Reputation points MVP Volunteer Moderator
1 answer One of the answers was accepted by the question author.

How to setup Jira Cloud Graph Connector to enable Write Permissions?

Hi, I wanted to setup the Jira Cloud Connector as per https://learn.microsoft.com/en-us/microsoftsearch/jira-connector Now I thought I could give the App in Atlassion DevCenter more permissions and use them, so I enabled some Write permissions. But even…

Microsoft Security | Microsoft Graph
asked 2025-04-14T09:30:24.4433333+00:00
Anonymous
commented 2026-09-01T06:18:40.7133333+00:00
JuliaMarvin 22,275 Reputation points Volunteer Moderator
1 answer One of the answers was accepted by the question author.

Microsoft Graph returns 401 for /me/calendars with delegated Calendars.ReadBasic on personal Microsoft account

App configuration Supported account type: Personal accounts only Public client / device-code authentication Authority: consumers Delegated Microsoft Graph permission: Calendars.ReadBasic only No client secret or certificate Observed behavior …

Microsoft Security | Microsoft Graph
asked 2026-08-25T02:02:49.7433333+00:00
Peter Holdorf 20 Reputation points
edited a comment 2026-08-31T15:23:47.37+00:00
Peter Holdorf 20 Reputation points
1 answer

opt-out passkeys for September 1st

Having issues with opt-out of passkeys commands using powershell 7 .. cannot successfully run the Invoke-MgGraphRequest -Method PATCH -Uri "https://graph.microsoft.com/beta/policies/authenticationMethodsPolicy" -Body $body -ContentType…

Microsoft Security | Microsoft Graph
asked 2026-08-28T17:15:33.8866667+00:00
Thomas Wrobel 0 Reputation points
answered 2026-08-31T11:18:37.56+00:00
Konstantinos Lianos 905 Reputation points Student Ambassador
1 answer

Graph sensitivity labels seem frozen

Since around 20 August, Microsoft Graph has served a frozen snapshot of my tenant's sensitivity labels and has not reflected a single change since, in any direction. Labels created and published after that date never appear (404 on a single GET, and 400…

Microsoft Security | Microsoft Graph
asked 2026-08-29T17:04:03.7066667+00:00
Luca Mitas 0 Reputation points
answered 2026-08-29T17:22:47.36+00:00
Vasil Michev 127.8K Reputation points MVP Volunteer Moderator