search

microsoftgraph / aspnet-snippets-sample

A repository of code snippets that use Microsoft Graph to perform common tasks such as sending email, managing groups, and other activities from an ASP.NET Core MVC app. This sample uses the Microsoft Graph .NET Client Library to work with data, and the Microsoft Identity Web Library for authentication on the Microsoft identity platform v2.0 endpoint.
MIT License
189 stars 101 forks source link

Get groups - Authorization_RequestDenied #35

Closed humaflorin closed 6 years ago

humaflorin commented 6 years ago

Hi.

My question is: Only admin creator of Active Directory(AD) can read/write groups ?

With default AD members (with directory role = Global administrator) i can access users, but not groups. https://prnt.sc/hxmp32

jamescro commented 6 years ago

Yes. You can refer to this document for a list of scopes: https://developer.microsoft.com/en-us/graph/docs/concepts/permissions_reference This topic also indicates whether a scope requires admin consent, and unfortunately the current group-related scopes all require admin consent.