Getting a 403 error when attempting to create a Subscription using Graph API since 30th September

Graham Norris 66 Reputation points
2022-10-05T15:16:39.387+00:00

We are using our own application to request creations/deletions of subscriptions in Graph API using the Java SDK.

This was working fine until Friday 30th September, since then we are receiving 403 errors back when we try to create a Drive subscription. Other resources requests (that don't need the permission Files.ReadWrite.All) are still working (i.e. CallRecord resource, we can create and delete subscriptions for them). Please see below:

Expected behavior
201 CREATED

Actual behavior
Error code: ExtensionError
Error message: Operation: Create; Exception: [Status Code: Forbidden; Reason: Access denied]
POST https://graph.microsoft.com/v1.0/subscriptions
SdkVersion : graph-java/v5.15.0
SdkVersion : graph-java/v5.15.0
403 : Forbidden

Steps to reproduce the behavior
Attempt to create a Subscription through a Daemon application using the Java SDK. As per the Documentation (https://learn.microsoft.com/en-us/graph/api/subscription-post-subscriptions?view=graph-rest-1.0&tabs=http#permissions) my application has permissions Files.ReadWrite.All for Drive Subscriptions.

I am using Certificate Authentication.

Kind regards

Microsoft Security | Microsoft Graph
0 comments No comments
{count} vote

Accepted answer
  1. Bhanu Kiran 3,616 Reputation points
    2022-10-06T03:18:24.6+00:00

    Hello @Graham Norris ,

    I would recommend you to raise a support case with Microsoft Graph, a Support Engineer will be able to assist you better.

    You can raise support ticket from http://aad.portal.azure.com/ or https://admin.microsoft.com/#/support/requests.

    Hope this helps.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have further questions about this answer, please click "Comment".

    0 comments No comments

1 additional answer

Sort by: Most helpful
  1. Graham Norris 66 Reputation points
    2022-10-06T10:20:23.66+00:00

    Thanks, we only have a basic Microsoft account, so I don't think we are able to create a support ticket that way. Any other way that we can raise this, please?


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.