Microsoft Graph API permistion required to read Selective user emails not everyones email

Ramachandran umapathi 1 Reputation point
2022-08-04T06:33:09.63+00:00

We required to access selective/group of users email contents not for all users. but now we can read all users email contects using 'Mail.ReadBasic' API permission.

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,511 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. CarlZhao-MSFT 36,736 Reputation points
    2022-08-04T07:13:14.293+00:00

    Hi @Ramachandran umapathi

    Please refer to Scoping application permissions to specific Exchange Online mailboxes, which can limit your application to only access to the specified mailboxes.

    Just use the New-ApplicationAccessPolicy PowerShell cmdlet to configure access control. 

    New-ApplicationAccessPolicy -AppId e7e4dbfc-046f-4074-9b3b-2ae8f144f59b -PolicyScopeGroupId EvenUsers@contoso.com -AccessRight RestrictAccess -Description "Restrict this app to members of distribution group EvenUsers."

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.