Microsoft Graph Application - Get Planner Task Permissions

Question

Microsoft Graph Application - Get Planner Task Permissions

Luke Sloane-Bulger 81

Hi,

I'm aiming to make an application that gets and lists our Microsoft Planner Tasks.

Looking at the "Get Planner Task" source here: https://learn.microsoft.com/en-us/graph/api/plannertask-get?view=graph-rest-1.0&tabs=http it states that the permissions under "Application" are "Not Supported"

I can see on Stack Overflow users have granted just granted the "Group.ReadWrite.All" as a workaround. What would be the least privileged permission I could use for this?

Note: I only need to get and read the planner and it's associated tasks, I don't need to perform any modifications to the tasks.

0 comments

Answer accepted by question author

0 additional answers

Your answer

Answer 1

CarlZhao-MSFT 46,456

Of course, it currently does not support application permissions. The least privileged permission to call this api is the Tasks.Read delegated permission. You can grant this permission for your application and grant the administrator's consent, and then you need to use the auth code flow based on user interaction login to obtain the token.

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

John Green 1 Reputation point

2022-01-24T10:31:37.377+00:00

Hi,

Thank you for the answer.

authorization code flow implies user interaction. How can I do to acquire the same permissions (read/write task in a plan) but without user interaction (service 2 service scenario)?

Thank you.
Luke Sloane-Bulger 81 Reputation points

2022-01-24T10:51:55.23+00:00

Hi @John Green

The Planner Tasks endpoint only supports the Delegated workflow as there's currently no Application permissions annoyingly, which makes automating this harder (https://learn.microsoft.com/en-us/graph/api/plannertask-get?view=graph-rest-1.0&tabs=http).

I've asked about this before in: https://learn.microsoft.com/en-us/answers/questions/636458/microsoft-graph-api-planner-tasks-access-token-que.html?childToView=637063#answer-637063

To get the Access Token you need to first login with your Authorisation URL and then have your application call the Planner Task endpoints with a Microsoft User. (Note: you'll need to set the relevant permissions in Azure).

In the end, I worked around this login constraint by using the Gauge/Taiko Node.JS (used for headerless browser automation) libraries to automate the need to login to Microsoft to get the Delegated Access Token.

For example, my script calls my Authorisation URL, logs in via a headless browser and then complete my PHP script to completion to get our Planner Tasks and perform our required scenarios.

Share via

Microsoft Graph Application - Get Planner Task Permissions

0 additional answers

Your answer