Microsoft Graph API - Application - Limited access for Reading Emails

Question

I am uisng Microsoft Graph API - to read emails of a specific user , download the attachments and then mark email as "READ".
Which is working great.
The thing which I am concenered about it is that I can access to any mail box in the organisation, which is not what we want.
Can anyone please help how exactly did you resctrict it for a single user?

Answer 1

You can use application access policies as detailed here: https://learn.microsoft.com/en-us/graph/auth-limit-mailbox-access

Going forward, these will be replaced by native integration with Exchange's RBAC model, just announced in preview: https://techcommunity.microsoft.com/t5/exchange-team-blog/announcing-public-preview-of-role-based-access-control-for/ba-p/3688228