Questions tagged [azure-ad-graph-api]

Use this tag for Azure AD Graph API (see link [1] in details below) related questions (not Microsoft Graph). The Azure Active Directory Graph API provides programmatic access to Azure AD through REST API endpoints. Applications can use the Graph API to perform create, read, update, and delete (CRUD) operations on directory data and objects

Graph API supports the following common operations for a user object:

  • Create a new user in a directory
  • Get a user’s detailed properties, such as their groups
  • Update a user’s properties, such as their location and phone number, or change their password
  • Check a user’s group membership for role-based access
  • Disable a user’s account or delete it entirely

In addition to user objects, you can perform similar operations on other objects such as groups and applications.

Useful Links:

  1. Documentation
  2. MSDN: Azure AD Graph API Reference
  3. Microsoft Graph or Azure AD Graph
1920 questions
0
votes
1 answer

Unable to get Token with Work Account for Teams OnlineMeeting API within MS Graph platform

Business Requirement: We want to replace our Skype meeting URL with Teams meeting on our production system(within a ABAP daemon service without user integration). So I am trying to integrate with Teams using Microsoft Graph API to be able to…
0
votes
2 answers

MS Graph API - AADSTS50126: Error validating credentials

A recurring job has started to fail, I've recreated the issue with Postman. Error: "error": "invalid_grant", "error_description": "AADSTS50126: Error validating credentials due to invalid username or password." "error_codes": [50126] "error_uri":…
0
votes
2 answers

Access token validation fails if scope is graph.microsoft.com

Received access token from AAD, using below url https://login.microsoftonline.com/gdfdddddd-87dd-497c-b894-xxxxxx/oauth2/v2.0/token grant_type :client_credentials client_id…
0
votes
1 answer

Automate group creation and memberships in Azure B2C

Is it possible using Graph API or similar to automatically add users to a security group in Azure B2C? The background is that during an Azure B2C user journey for signup/sign the user will access an application after successful authentication. But I…
RJ.
  • 15
  • 4
0
votes
1 answer

Set Library security roles through the Graph API in Azure DevOps

I'm terribly sorry if this has been answered before, but I could not find anything by searching. I'm trying to add users to a library role though the Azure DevOps API, however I'm struggling to find the correct endpoint to do this. I'm fairly…
Peter
  • 3
  • 1
0
votes
0 answers

NoPermissionsInAccessToken when acessing GraphAPI in ASP.NET Core 3

I am using ASP.NET Core Web API 3, authorization code flow against AzureAD v2 + PKCE. When I get the acess_token within my controller and then try get a user photo via DelegateAuthenticationProvider, I receive NoPermissionsInAccessToken Message: The…
0
votes
3 answers

Unable to render OneNote image resource after appending preAuthenticated=true option in OneNote api call

https://github.com/microsoftgraph/microsoft-graph-docs/issues/2624 I am experience the issue as the above. I am trying to save the content of a page with a reference to an image by calling…
0
votes
1 answer

AAD - FIDO implementation

On our existing AAD, we are trying to integrate with FIDO2 authentication. As part of this integration b/w AAD & FIDO, in azure portal under "Security Authentication methods | Authentication method policy (Preview)" AD Admin have been provided UI…
191180rk
  • 735
  • 2
  • 12
  • 37
0
votes
1 answer

GET List of Privileged Role Assignments fails with "UnknownError"

I've got an app registration in Azure with the required permission - Directory.AccessAsUser.All (delegated) and that registration has Security Reader over all of my subscriptions. When I GET…
hjfitz
  • 399
  • 4
  • 15
0
votes
1 answer

microsoft graph api assign license giving error

I am trying to assign license to a user with Office 365 business premium skuid but getting following error. Request body: { "addLicenses": [ { "skuId": "skuid" } ], "removeLicenses": [] } Response { "error": { "code":…
0
votes
1 answer

How to get contacts from Azure Ad graph api

I am trying to get contacts list using Azure AD Graph API but don't know how to give permission for application to read contacts. Azure AD Graph API provides operation for these objects only…
0
votes
1 answer

Azure AD token calling MS Graph Api for getting email messages - Got 401 unauthorized

I have been struggling with this problem for 2 days. I am currently trying to build a web application which is able to revoke the MS Graph Api to fetch the current user's email messages. Firstly I have register an AD and a application within it, and…
0
votes
1 answer

GraphServiceClient UpdateAsync() throwing error Resource '' does not exist or one of its queried reference-property objects are not present

I am using below code to update custom extension claim attribute but it is not working. GraphServiceClient UpdateAsync() method throwing error var graphServiceClient = new GraphServiceClient(new DelegateAuthenticationProvider((requestMessage) => …
0
votes
1 answer

Is it possible to Search User in Azure AD using partial Email address

Is it possible to search a user in Azure AD based on Email Address partial search? I want to search "rocketsingh@gmail.com" just by entering singh. I don't think graph api allows a partial search on email. If it is possible, then let us…
Rocket Singh
  • 469
  • 1
  • 10
  • 22
0
votes
1 answer

Get object identifier of Microsoft account from shared tenant (9188040d-6c67-4c5b-b112-36a304b66dad)

Is there a way to get value of "objectIdentifier" claim for Microsoft account? Case: I have an app with one form field, email (need's to be Microsoft account). When this email is entered, server (back end) need's to find out value of object…