API Permissions not updated when using Microsoft Graph

Question

I have an App Registration that has two API permissions. I want to use this permission to access some information about the user in my apps.

I have already integrated this app registration into my web apps in Azure Portal. I am adding this in the Authentication section on the Web Apps page.

But the problem is I still can't use the access token from the Authentication to get the information based on the permission that I already created before. I have checked the access token in https://jwt.ms/, but the scope is still not updated.

I already restarted the Web Apps and tried to recreate the App Registration several times. Someone said that it may be because of the delay but it still has not changed. How can I update the permission so I can get the access token with the correct permission?

Answer 1

Hi @Al Ghiffari

Thank you for posting this in Microsoft Q&A.

I understand you're attempting to obtain API permissions with Microsoft Graph, but the scope value is not being updated in the access token.

From your screenshot, "Calendars.Read" and "User.Read" are delegated permissions. These are user permissions that require a logged-in user to receive delegated permissions in the OAuth 2.0 authorization code flow.

Ensure you have included the scope 'Calendars.Read' when requesting the authorization code and access token.

Request an authorization code

https://login.microsoftonline.com/{tennat_id}/oauth2/v2.0/authorize?
client_id={clent_id}
&response_type=code
&redirect_uri=https://login.microsoftonline.com/common/oauth2/nativeclient
&response_mode=query
&scope=Calendars.Read

You will receive a code as shown below; use the code to obtain an access token.

https://login.microsoftonline.com/common/oauth2/nativeclient?code=0.AQEAY-2yG4SC3Uiprd4Riu4ytk6lC7hx6fVLiChkvaSGqSu8AOA.AgABBAIAAAApTwJmzXqdR4BN2miheQMYAgDs_wUA9P_Lx-5u-a-Zc2z8I3IQhoLRnIZesltlH4-VnhM3qEc6_7XhhdTEvh1Mc_Tm6PtfTU31__vIkrErJiU9Mm53euvgT2jOIBHnercNxU9vZwza9DrFN5kV2IY0bgwTj3Qf4k-wrMesFqN2UAIHaRnnGmwYbkxEhP74unprEb2MUL46p2jpg1N98lZnLjsZeuFdLlaaRfAuyUCenIp

Request an access token.

Checked in jwt.ms Successfully obtained Calendars. Read scope in the access token.

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.