14,203 questions with Microsoft Security | Microsoft Graph tags

Sort by: Updated
0 answers

Microsoft Graph event transactionId retention and safe recovery after an unknown create outcome

We are developing an Outlook calendar integration using Microsoft Graph v1.0 and delegated Calendars.ReadWrite access. It creates attendee-free single-instance events in the connected user's calendar. Before sending POST…

Microsoft Security | Microsoft Graph
asked 2026-10-02T01:21:31.11+00:00
Daniel Hollis 0 Reputation points
1 answer One of the answers was accepted by the question author.

Get-Mguser SignInActivity reports blank. Started today, 1st october 2026

Hello, since this morning, Get-Mguser SignInActivity reports blank. yesterday worked without any issue. using Invoke-MgGraphRequest SignInActivity works. Name Version Microsoft.Graph …

Microsoft Security | Microsoft Graph
asked 2026-10-01T11:20:25.1433333+00:00
Sérgio Pinto 0 Reputation points
accepted 2026-10-01T11:52:04.11+00:00
Sérgio Pinto 0 Reputation points
0 answers

The Request Body in Graph Explorer keeps loading and never finishes.

When accessing Graph Explorer from multiple devices, the Request Body section remains in a Loading state and cannot be edited or populated. Could you please advise on the cause of this issue and any possible resolution…

Microsoft Security | Microsoft Graph
asked 2026-10-01T10:13:43.4466667+00:00
Hirokazu Matsumoto 0 Reputation points
commented 2026-10-01T10:49:26.3233333+00:00
Vasil Michev 128.1K Reputation points MVP Volunteer Moderator
1 answer

Personal Microsoft account gets 403 for GET /me/calendar with Calendars.ReadBasic consented

I’m signed in to Graph Explorer under Tenant: Personal. My Outlook.com primary calendar opens normally in the browser. Graph Explorer shows Calendars.ReadBasic consented. After signing out and back in, this request still returns 403: GET…

Microsoft Security | Microsoft Graph
asked 2026-09-30T21:52:01.21+00:00
Colin White 0 Reputation points
answered 2026-10-01T06:26:36.91+00:00
Vasil Michev 128.1K Reputation points MVP Volunteer Moderator
0 answers

Entra External ID: PATCH user identities returns 403 despite User.ManageIdentities.All

Hi everyone, We’re implementing Singpass authentication through a custom OIDC adapter in a Microsoft Entra External ID external tenant. New customer signup through the provider works, and Entra creates a user with a federated identity. We now want to…

Microsoft Security | Microsoft Graph
asked 2026-10-01T01:57:25.9866667+00:00
Darrel Remoroza 0 Reputation points
1 answer One of the answers was accepted by the question author.

User.ReadBasic.All listed as an Application permission, but no /users operation accepts it

The permissions reference lists User.ReadBasic.All under both Application and Delegated categories, with a distinct app role id for each (97235f07-e226-4f63-ace3-39588e11d3a1 for Application) and AdminConsentRequired: Yes. This makes it appear as a real,…

Microsoft Security | Microsoft Graph
asked 2026-09-29T16:33:40.4233333+00:00
Jonathan 20 Reputation points
accepted 2026-09-30T21:03:07.8066667+00:00
Jonathan 20 Reputation points
1 answer

Sending emails with the Graph Java SDK fails with 504, but messages get queued and sent. How to detect it?

I am using the Java graph SDK to send emails. Sometimes (about once every two weeks) the call fails with a 504. I sleep for 5 seconds and try again. After 4 failures the next time I try I get a 429 (indicating that the other four attempts are still…

Microsoft Security | Microsoft Graph
asked 2025-06-25T09:11:33.51+00:00
Stelios 0 Reputation points
commented 2026-09-30T20:03:39.1466667+00:00
Authentic Random 0 Reputation points
0 answers

GET /me/notes returns 403 ErrorAccessDenied for a personal Outlook.com account with ShortNotes.ReadWrite delegated consent`

Microsoft Graph report draft Title: GET /me/notes returns 403 ErrorAccessDenied for a personal Outlook.com account with ShortNotes.ReadWrite delegated consent I am using a personal Outlook.com/Hotmail Microsoft account. The account has an Outlook Notes…

Microsoft Security | Microsoft Graph
asked 2026-09-28T05:26:33.9066667+00:00
Zeno Gao 0 Reputation points
commented 2026-09-28T06:53:16.49+00:00
Vasil Michev 128.1K Reputation points MVP Volunteer Moderator
0 answers

Files.ReadWrite.AppFolder on personal OneDrive: 200 for drive-root metadata

In a delegated Microsoft Graph flow for a personal Microsoft account, the token response reported exactly Files.ReadWrite.AppFolder and User.Read. Reading a synthetic file inside the app folder succeeded. A separate GET…

Microsoft Security | Microsoft Graph
asked 2026-09-25T12:57:09.8066667+00:00
Igor Kolodin 0 Reputation points
commented 2026-09-25T18:55:03.2466667+00:00
Igor Kolodin 0 Reputation points
0 answers

Microsoft Graph v1.0 passkey creationOptions returns WebAuthn parameters rejected by Chromium

Hello, we are implementing programmatic passkey registration for a Microsoft Entra External ID tenant. To obtain WebAuthn creation options, our backend uses an app-only access token and Microsoft Graph Java SDK 6.65.0 with the following SDK call: final…

Microsoft Security | Microsoft Graph
asked 2026-08-10T09:16:48.5933333+00:00
Eka Lin 0 Reputation points
commented 2026-09-24T06:47:58.43+00:00
Eka Lin 0 Reputation points
0 answers

Microsoft Graph Explorer presents schema error for the "Adaptive Card" type

I’m looking for guidance regarding an error when using the Microsoft Graph Explorer POST method for "Adaptive Card" to Microsoft Teams. Below, you can notice that the communication works fine when I use a simpler JSON. However, when I use the…

Microsoft Security | Microsoft Graph
asked 2025-02-21T21:06:46.1033333+00:00
Antonio Carlos Ghiraldello 0 Reputation points
0 answers

How to deal a 400 error from GraphAPI when input looks valid

I have an application that uses Microsoft Graph to send emails. Several times a day I am getting an OADataError with a response code of 400 error from the SDK, reporting "At least one recipient is not valid., A message can't be sent because it…

Microsoft Security | Microsoft Graph
asked 2026-09-23T18:29:49.2366667+00:00
Bob Ammerman 0 Reputation points
3 answers

To Do: completedDateTime and timezone

Goal: retrieve list of completed To Dos of a users for a given day. The description of completedDateTime states that it refers to the timezone specified (link to doc). However it appears that the returned date value is always UTC midnight Repo: I…

Microsoft Security | Microsoft Graph
asked 2021-09-27T07:15:05.72+00:00
Timo 51 Reputation points
edited a comment 2026-09-22T13:01:11.6833333+00:00
Timo 51 Reputation points
1 answer

Which vector DB or graph DB does Microsoft Graph use for Copilot connectors?

Hi Team, Copilot connectors index external content into Microsoft Graph (docs: https://learn.microsoft.com/en-us/graph/connecting-external-content-connectors-overview). Can someone confirm which database technology is used to store and query this indexed…

Microsoft Security | Microsoft Graph
asked 2026-09-22T10:29:24.2366667+00:00
Prabhjot Singh 255 Reputation points
answered 2026-09-22T10:29:39.3066667+00:00

AI answer

1 answer One of the answers was accepted by the question author.

Graph API /createImportSession request

Hi All, I use Graph API /createImportSession request and then the returned "importUrl" to replace EWS functionality <m:UploadItems>. It works for messages and contacts but not for events. I.e. I can read events with /exportItems but can't…

Microsoft Security | Microsoft Graph
asked 2026-09-15T13:16:31.1633333+00:00
val19680507 21 Reputation points
accepted 2026-09-22T08:14:14.97+00:00
val19680507 21 Reputation points
1 answer

PATCH /beta/admin/appsAndServices returns 204 No Content but never applies the settings

PATCH https://graph.microsoft.com/beta/admin/appsAndServices returns 204 No Content and the settings are never applied. A subsequent GET returns the old values indefinitely. The same two settings can be changed successfully by hand in the Microsoft 365…

Microsoft Security | Microsoft Graph
asked 2026-09-09T15:10:12.8233333+00:00
Esteban Ricalde 0 Reputation points
commented 2026-09-22T02:18:04.7866667+00:00
Andrew @ 365Sentri 0 Reputation points
1 answer

How to make a /subscriptions graph API call in a multi-geo URL setup? Getting a 404 error when trying to register a webhooks subscription.

We are getting a 404 error when trying to register a webhooks subscription using Graph API on a Sharepoint Online Document Library. We are working with a multi-geo environment, in which case there are 2 sharepoint URLs under the same tenant (E.g.…

Microsoft 365 and Office | SharePoint | Development
Microsoft Security | Microsoft Graph
asked 2025-01-10T13:14:44.9466667+00:00
Raghunandan Kumbhar 20 Reputation points
commented 2026-09-21T09:58:09.4633333+00:00
JuliaMarvin 22,915 Reputation points Volunteer Moderator
0 answers

OneDrive Personal upload session: does If-Match remain a commit precondition?

Context We update an existing OneDrive Personal item through Microsoft Graph v1.0. We need optimistic concurrency: an upload session created for an exact item with a frozen eTag must never overwrite a write that changes that item before session…

Microsoft Security | Microsoft Graph
asked 2026-09-19T04:41:50.9933333+00:00
1 answer

Microsoft Search insights and configuration - Download Report using API or Power Automate

SharePoint site collection administrators will be able to get insights regarding the total number of search queries performed, number of results by type over time, top searched queries etc. from Site Settings. Site Settings->Search Insights and…

Microsoft 365 and Office | SharePoint | For business | Windows
Windows for business | Windows Server | User experience | PowerShell
Microsoft Security | Microsoft Graph
asked 2024-06-29T05:17:20.0066667+00:00
Varghese, Ajith (Cognizant) 20 Reputation points
commented 2026-09-17T15:02:35.22+00:00
nicolas Wolf 0 Reputation points
2 answers

Graph API Move Message API intermittently failing for specific email messages

Hi Team, The Move API is successfully moving emails for certain messages; however, few request, the same API call fails or does not move the message to destination folder as expected. As part of the requirement, we are trying to move the eMail from…

Microsoft Security | Microsoft Graph
asked 2026-09-17T10:53:17.7266667+00:00
Sangeetha D 0 Reputation points
answered 2026-09-17T12:33:03.9233333+00:00
Sangeetha D 0 Reputation points