This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(240, 85%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJG%3C/text%3E%3C/svg%3E)
Hello all,
I have retrieved every device Enrollment Configurations from the Graph API by using: "https://graph.microsoft.com/v1.0/deviceManagement/deviceEnrollmentConfigurations?$select=id".
But suddenly i get a forbidden error:
"Application is not authorized to perform this operation as called in app only context but does not have application permissions configured.
I use an app registration with a token to authorize my requests. In the past it has always worked. Did something changed?
Update: Problem was on the Microsoft Side. They updated the Graph API and caused an authentication problem when you were authenticating as "app-only Context". Couple weeks ago they fixed it.
@Jay Goos Thanks for posting in our Q&A.
For this error, it seems that doesn't have permissions. Based on my research, we need the following permissions:
DeviceManagementServiceConfig.ReadWrite.All
DeviceManagementServiceConfig.Read.All
https://learn.microsoft.com/en-us/graph/api/intune-shared-deviceenrollmentconfiguration-get?view=graph-rest-beta#prerequisites
I have tried to run the requset in Graph explorer. It works well.
Hope it will help.
Hello,
I have tried the same and i get the same result as you, however there is a difference between authenticating. Using the Microsoft graph you will use your user credentials instead of using appID and appsecret to retrieve a token, which you can use to authenticate.
I consented the permissions to my app registration, except for the read permission (to my understanding that one is not needed, if you have consented the readwrite permission) as you can see below:
@Jay Goos Thanks for your update. For the graph issue, it is more related to develop scope. With Q&A limitation, it is suggested to create a premier support ticket to get more accurate help. Here is the support link:
https://learn.microsoft.com/en-us/mem/get-support#premier-and-unified-support-customers
Hope it will help.
I am encountering the same issue, need assistance or answer here to help me in resolving.
Hello @Jason Doyle ,
The issue was on the Microsoft side. They updated the Microsoft Graph some time ago and caused an authentication problem. They updated the Graph API and now it works for me again.
I created a ticket with Microsoft and they escalated it to the engineers. The engineers told it was on their side.
See solution: Problem was on the Microsoft Side. They updated the Graph API and caused an authentication problem when you were authenticating as "app-only Context". Couple weeks ago they fixed it.