microsoft-graph

问题 To continue my quest to programmatically create and Azure application (this continues from https://stackoverflow.com/a/44753728/1332416), I have core that acquires a subscriptionID and a tenantId as follows, but I'm at loss as how could I create an application and its associated service principal locally. This is basically where New-AzureRmADApplication and New-AzureRmADServicePrincipal would be used in case of PowerShell. This question is partially answered at https://stackoverflow.com/a

问题 I'm trying to add some profile data onto users in my AAD tenant. Using Microsoft Graph, I can add a an open extension to one user. URL (POST): https://graph.microsoft.com/v1.0/me/extensions Body: { "@odata.type": "Microsoft.Graph.OpenTypeExtension", "extensionName": "mydev.profile", "value1": "1000", "value2": "3" } This works, and I can update it with PATCH https://graph.microsoft.com/v1.0/me/extensions/mydev.profile However, if I try to add the same extension to a different user, I get an

问题 I'm trying to use Microsoft Graph from my app via REST API graph.microsoft.com/beta/schemaExtensions Here is what I did: Register app at https://apps.dev.microsoft.com Checked for all Delegated and Application authorizations Got access token without a user based on OAuth Client Credentials Grant flow Asked for Admin Consent with access token retrieved from point 3. and it was successful using https://login.microsoftonline.com/tenant/adminconsent?client_id=xxx&state=12345&redirect_uri=http:/

问题 I am trying to create a Daemon (code-only, server-only) app that can access my Personal Microsoft Account. I cannot figure out how to get an Access_Token that does not expire (or a refresh_token). I can create a working non-expiring (admin logs in only once) Daemon app for my Business (Office 365) Account using the "adminconsent" endpoint detailed here: https://azure.microsoft.com/en-us/documentation/articles/active-directory-v2-protocols-oauth-client-creds/ or here: https://blogs.msdn

问题 I am trying to use the OneDrive API and I have successfully registered my app through their Application Registration Portal. I can call successfully call the Javascript FilePicker SDK to upload and download files That demonstrates that I have my app registered properly and the proper app/client-id's. Now I'd like to use the REST services to upload and download files but I'm not sure how to send authentication and I don't know how to make the call to the proper URL. My first question is : How

问题 Using graph explorer, I want to get data from Excel file from SharePoint site From Onedrive (for business) this works: graph.microsoft.com/beta/me/drive/root:/Map1.xlsx:/workbook/worksheets From SharePoint site doesn't: graph.microsoft.com/beta/sharepoint:/MyFabulousSite/MyDocLib/Map1.xlsx:/Workbook/worksheets Response: Status Code: 400 { "error": { "code": "BadRequest", "message": "Resource not found for the segment 'Workbook'.", "innerError": { "request-id": "160a545b-66b8-44fc-92b7

问题 I'm creating new application using POST https://graph.microsoft.com/beta/applications I can get the AppId back, but can't find a way to get the AppKey. I would like to access that app later using application credentials. Update: That what I send as password credential during the application creation: newAppObj.passwordCredentials = new List<AOBJ.AzurePasswordCredential>(){ new AOBJ.AzurePasswordCredential() { customKeyIdentifier = "T1rEXhNmUUmVqimnBPkirw==", keyId = Guid.NewGuid().ToString(),

问题 I'm able to retrieve profile photos just fine, but run into ErrorAccessDenied when trying to update photos. According to this: https://graph.microsoft.io/en-us/docs/api-reference/v1.0/api/profilephoto_update The User.ReadWrite permission should be sufficient. I have assigned my application this privilege using manage.windowsazure.com (and also tried granting all kinds of other privileges), but still get the error. Here's the current set of privileges I've granted to the app: Directory

问题 Alright, so after chatting with Microsoft "Professional Support" they couldn't help me. Told me to access the reports via the SfB Report GUI and export to Excel. Yeah that's completely worthless to me. After doing a lot more reading, my 1st example to authenticate was out of date. Now I have a fully functional oAuth2 PowerShell script that gets me a valid token. But I'm having the same issue when I use the Graph Explorer (403 Forbidden). I know the token is working because I can query other

问题 I'm using the Graph Explorer to play with the Microsoft Graph. I understand you can access a group by specifying its id, like so - https://graph.microsoft.com/v1.0/groups/14481298-e121-4d97-91d5-3fe555aa2871 and you can get its members as well like this - https://graph.microsoft.com/v1.0/groups/14481298-e121-4d97-91d5-3fe555aa2871/members But it isn't clear to me how you lookup a group by its email address and list the members in one call. I now know, so I thought I would share, and also ask