Microsoft Graph
422 feedback
Vote
David Craig
4 months ago
POST to /planner/tasks on Premium Plan Fails error 403
Description
When I try to create a Task on one of the new Premium Plans in Microsoft Planner via the graph API endpoint: /planner/tasks, I get an error 403. If I do the same to an older existing or new Basic Plan, it works fine.
SEE: https://learn-attachment.microsoft.com/api/attachments/625651b3-576d-4012-948f-fed01eec2069?platform=QnA
Repro
You need a Planner Premium 1 added to your subscription
Go into Teams
Add the Planner add to your Teams bar
Open Planner from Teams button
New Plan in lower left
Select Premium Plan and create it
Add a single task titled: "Help!"
Go to Graph Explorer, sign-in and get a list of plans /me/planner/plans, find your plan ID
Now /planner/plans/{id}/buckets and get the ID for the bucket
Now enter this into the body:
{ "title": "simple test", "bucketId": "{bucket id}", "planId": "{plan id}", "orderHint": " !" }
Change URI to: /planner/tasks and type to POST
Submit
RESULT: Error 403: You do not have the required permissions to access this item, or the item may not exist.
EXPECT: The task to submit
NOTE: You can GET on that endpoint...
Change the type to GET leave at /planner/tasks
Submit
RESULT: You will get the result where the task you created in step 7 above: "HELP!" appears.
EXPECT: Same
Additionally, if I try to CREATE a bucket with a POST, I get an error:
{ "name": "New Bucket", "planId": "{plan_ID}", "orderHint": " !" }
Graph Explorer tells em the only permissions I need are: Tasks.ReadWrite, Group.ReadWrite.All.
See the following inmages,
https://learn-attachment.microsoft.com/api/attachments/cc389316-8bcc-4267-be45-3e7a3f8da5b7?platform=QnA
https://learn-attachment.microsoft.com/api/attachments/f1938e73-9795-491f-97f6-75eec43f3962?platform=QnA
https://learn-attachment.microsoft.com/api/attachments/cf767cd3-8c1d-49d4-a2a7-a5f423c6a99e?platform=QnA
QUESTIONS
Why are Premium plans supported with GET but not POST?
Are there additional permissions we need?
If it is not supported, is there a way to differentiate a Premium Plan via GET from a Basic Plan via a GET?
If it is not supported, are there plans to eventually support this?
If there are plans to eventually support POST on the endpoints with Premium Plans - when?
If there are not any plan to support POST on Premium plan, are there plans to differentiate between the two via a GET?
FEEDBACK / CONCLUSION
This is impacting a popular freemium product on AppSource. Users upgrade to the PREMIUM Planner experience from Microsoft and the Outlook add-in no longer will work with plans that get upgrade or with new plans created via the premium option. This also impacts the ability for Power Automate to create tasks on Premium plans, and any API operation where creating a task is automated.
Open
WebTasks and PlansOpen
Vote
Dennis Winter
5 months ago
get modern workinghours via GraphAPI
Given the option for "modern" working hours introduced with the new Outlook and the Web-Edition, I'm shocked, there is no optoin to fetch those working hours via Graph API.
Please introduce an API for this new method of working hours!
Given a setup of the modern working hours like this
Mo 8-12 (in Office)
13-17 (Remote)
Tu 19-23 (Remote)
Th 6-10 (Remote)
Fr 10-14 (In Office)
Any request of Mailboxsettings or getschedule will result into this consulidated view, where the earliest start time and the latests end time is chosen:
"workingHours": {
"daysOfWeek": [
"monday",
"tuesday",
"thursday",
"friday"
],
"startTime": "06:00:00.0000000",
"endTime": "23:00:00.0000000",
"timeZone": {
"name": "W. Europe Standard Time"
}
}
Open
WebCalendarOpen
Vote
Andreeva, Olga
7 months ago
Some file (driveItem) types are not found with Microsoft Graph API search in a nested folders
Hello,
I am using the search query:
POST https://graph.microsoft.com/v1.0/search/query
{
requests: [
{
entityTypes: ['driveItem'],
query: {
queryString:
'filename:"fir" AND path:"https://tenant-my.sharepoint.com/sites/xxx/Documents/nestedFolder" AND ParentLink:"/nestedFolder"',
}
},
],
}
My use case:
1. I have 2 files: 'Fir test.png' and 'Fir test.docx' in my library in a nested folder.
2. I am searching with filename = "fir".
Expected result: 2 files are found.
Actual result: only 'Fir test.docx' is found. This result is reproduced when files are located in nested folder (e.g. "nestedFolder").
I have posted the question about it and it seems to be a bug https://learn.microsoft.com/en-us/answers/questions/1725895/png-files-(driveitem)-are-not-found-with-microsoft?comment=answer-1557551&page=1#comment-1608290.
There are other similar questions: https://learn.microsoft.com/en-us/answers/questions/702018/graph-api-search-for-driveitems-within-a-drive-doe, https://learn.microsoft.com/en-us/answers/questions/467709/graph-api-include-image-file-information-in-search.
The list of not found file types:
.mp4
.tif
.tiff
.jpeg
.jpg
.png
.dif
The same is applied to this endpoint:
/groups/{group-id}/drive/items/{item-id}/search(q='search')
Could you please fix the behavior?
Open
WebSearchOpen
Vote
Yannick Cordinier
7 months ago
Allow more granular permissions to be granted to access Teams data through the App-Only access flow
The permissions requested by an application to an administrator to access Teams data target public AND private channels. This becomes a security challenge when some customers only want to use an application that should only access public Teams channels data. The goal of this request is to restrict the permissions to only public Teams in the flow app-only access flow (not delegated).
For instance instead of having these scopes requested by an application :
Channel.ReadBasic.All
ChannelMessage.Read.All
Team.ReadBasic.All
The application could request the following:
Channel.ReadBasic.Public
ChannelMessage.Read.Public
Team.ReadBasic.Public
If there is another way to achieve more granular permissions for Teams, please let me know.
Reference :
- https://learn.microsoft.com/en-us/graph/permissions-reference#channelmessagereadall
- https://learn.microsoft.com/en-us/entra/identity-platform/app-only-access-primer
Open
WebSecurityOpen
Vote
Niels Liégeois
1 year ago
Add endpoints for shared mailboxes
Shared mailboxes are widely used to handle incoming mail traffic for departments or teams that cannot use Microsoft Teams.
Unfortunately creating and manageing these shared mailboxes is not possible using the Microsoft Graph and currently requires the use of Exchange Powershell.
Adding "/user/{id}/mailboxes" or "/user/{id}/sharedmailboxes" or even "/sharedmailbox/{id}" endpoints with create, read, update and delete access aswell as access to the permissions given to the different users would greatly enhance the graph and its integration with companies and IAM systems.
Similar request have already been filed in the techcommunity but aren't as easily found when searching online:
https://techcommunity.microsoft.com/t5/microsoft-365-developer-platform/support-getting-a-list-of-shared-mailbox-members-with/idi-p/3056406
https://techcommunity.microsoft.com/t5/microsoft-365-developer-platform/get-a-list-of-shared-mailboxes/idi-p/3056438
Open
WebMailOpen