API not authenticating with Azure

Question

API not authenticating with Azure

scottj 11

unable to authenticate API when using Microsoft Graph component and granting access.

Venkata Jagadeep 330 Reputation points Microsoft External Staff

2025-03-11T22:11:47.6133333+00:00

Hello scottj,

As per description, we understand that you are not able to authenticate to API with MS Graph.

Usually one of the following permissions is required to call this API.

Delegated (work or school account) : User.ReadBasic.All, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All

Application : User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All

Permissions for specific scenarios

User-Mail.ReadWrite.All is the least privileged permission to read and write the otherMails property; also allows to read some identifier-related properties on the user object.

User-PasswordProfile.ReadWrite.All is the least privileged permission to read and write password reset-related properties; also allows to read some identifier-related properties on the user object.

User-Phone.ReadWrite.All is the least privileged permission to read and write the businessPhones and mobilePhone properties; also allows to read some identifier-related properties on the user object.

User.EnableDisableAccount.All + User.Read.All is the least privileged combination of permissions to read and write the accountEnabled property.

It will be helpful for us if you share the exact error that you are getting while accessing API.

Also please confirm the user who is trying to access API has necessary permissions on the target resource.
scottj 11 Reputation points

2025-03-12T01:15:42.6833333+00:00

yes I know. Tried that and it still doesn't work
SrideviM 755 Reputation points Microsoft External Staff

2025-03-12T13:27:12.44+00:00

Hello scottj,
Could you provide more details on your requirement? Specifically, what are you trying to achieve with Microsoft Graph, did you generate access token and are you encountering any specific errors? This will help us better understand and assist you.

1 answer

Your answer

Venkata Jagadeep 330 Reputation points Microsoft External Staff

2025-03-11T22:11:47.6133333+00:00

Hello scottj,

As per description, we understand that you are not able to authenticate to API with MS Graph.

Usually one of the following permissions is required to call this API.

Delegated (work or school account) : User.ReadBasic.All, User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All

Application : User.Read.All, User.ReadWrite.All, Directory.Read.All, Directory.ReadWrite.All

Permissions for specific scenarios

User-Mail.ReadWrite.All is the least privileged permission to read and write the otherMails property; also allows to read some identifier-related properties on the user object.

User-PasswordProfile.ReadWrite.All is the least privileged permission to read and write password reset-related properties; also allows to read some identifier-related properties on the user object.

User-Phone.ReadWrite.All is the least privileged permission to read and write the businessPhones and mobilePhone properties; also allows to read some identifier-related properties on the user object.

User.EnableDisableAccount.All + User.Read.All is the least privileged combination of permissions to read and write the accountEnabled property.

It will be helpful for us if you share the exact error that you are getting while accessing API.

Also please confirm the user who is trying to access API has necessary permissions on the target resource.
scottj 11 Reputation points

2025-03-12T01:15:42.6833333+00:00

yes I know. Tried that and it still doesn't work
SrideviM 755 Reputation points Microsoft External Staff

2025-03-12T13:27:12.44+00:00

Hello scottj,
Could you provide more details on your requirement? Specifically, what are you trying to achieve with Microsoft Graph, did you generate access token and are you encountering any specific errors? This will help us better understand and assist you.

Answer 1

Yakun Huang-MSFT 10,555 Microsoft External Staff

Hello scottj,

Thank you for reaching out to Microsoft Support!

If you have no problem granting permissions, then you need to get tokens through different streams depending on the type of permissions you grant.

Delegated permissions: Use auth code flow to get access tokens

Application permissions: Access tokens are obtained using client credentials flow

Reference document:

https://learn.microsoft.com/en-us/graph/auth-v2-user?tabs=http

https://learn.microsoft.com/en-us/graph/auth-v2-service?tabs=http

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.

Venkata Jagadeep 330 Reputation points Microsoft External Staff

2025-03-12T18:41:47.9766667+00:00

Hello scottj,

Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you still have issue, please share us the screenshot of the error and provide us the details of the requested permissions to access API.
Venkata Jagadeep 330 Reputation points Microsoft External Staff

2025-03-13T22:40:15.3066667+00:00

Hello scottj,

Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you still have issue, please share us the screenshot of the error and provide us the details of the requested permissions to access API.

Share via

API not authenticating with Azure

1 answer

Your answer