call https://graph.microsoft.com/v1.0/users with $filter failed with error: Insufficient privileges to complete the operation.

Question

When I call GraphAPI: https://graph.microsoft.com/v1.0/users?$top=6&$filter=userType%20ne%20%27Guest%27&$search=%22displayName:flow%22%20OR%20%22mail:flow%22 with $filter parameter. It throws an error:

If I removed the $filter parameter it works well and return the list of user:

Here is API Permission I configured for the App Registration:

Note: The Application Registration was configured as Multi-Tenant and this App Registration is from my Azure (For example Tenant A) Tenant. And the API works well with the Token of the User of Tenant A. But If I use a token of a user belonging to a different tenant, then the issue above happened.

Expected:

I can query the list user with $filter

Answer 1

Did you add header: 'ConsistencyLevel: eventual'? In my test, the run was successful by adding header.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi @Zehui Yao_MSFT

The issue you're talking is a different issue. Your issue is "Request_UnsupportedQuery" but our case is: "Authorization_RequestDenied"

And our situation is quite complicated because we request to GraphAPI with the access_token of an external user. I tried to explain to you below:

Could you please take a look the image and I have a question in the Summary.