This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 38%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ENS%3C/text%3E%3C/svg%3E)
I want to get the recent files for a user and am trying to use the /me/drive/recent API. The docs suggest that Files.ReadWrite.All should be sufficient permission for this but I get a 403 error on that call with a token that only has "User.Read.All" and "Files.ReadWrite.All".
Can someone please clarify what permissions are needed?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 18%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESK%3C/text%3E%3C/svg%3E)
Could you please share the request id and timestamp which is failing?
10-13-2020 13:36:16PST
Client RequestId: 7085bbc8-2211-42b0-822f-b946b1d1274e
X-MS-AGS-Diag: {"ServerInfo":{"DataCenter":"West Central US","Slice":"SliceC","Ring":"1","ScaleUnit":"000","RoleInstance":"AGSFE_IN_1"}}
RequestId: 2c0d6e15-337b-4087-a615-9e8544471508
Response Code: 403
I notice you are a Microsoft Employee. Are you trying to do this in the Microsoft Tenant with your Microsoft User Account? As this will not work because CSEO (MSIT) block these consents.
To clarify, I can't look at recent files via a delegated permission if I am using my Microsoft user account? If so, how do I get around this if my product needs this functionality?
There is an internal MSIT process for this. I will reach out to you directly.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 68%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJH%3C/text%3E%3C/svg%3E)
Hello @Nalin Singal
I've not been able to reproduce the reported issue? I was able to retrieve the recent files using a token that has the delegated permission "Files.ReadWrite.All". If I change the permissions to "Files.Read.All" only, it still works.
Can you please provide more information about the issue?
Regards
Jarbas Horst
What other permissions do you have on the token? I seem to be able to make the call successfully when all the permissions are on the token but it fails when I only have "User.Read.All" and "Files.ReadWrite.All". But that token is able to make calls to user APIs like /me and /users/<userid>.