API throttling limits for multi-tenant app apply where?

Question

Hi,

For a multi-tenant OAuth based enterprise application calling the Graph API...

....do the published app and tenant API throttling limits apply to:

1. the single global application and the "home" tenant OR
2. each instance of the application (aka service principal) and "hosting" tenant that has consented to the app OR
3. some other combination

I'm trying to understand if throttling limits are essentially counted to the "home" app-tenant or the "hosting" app-tenant or some combination.

The throttling page at https://learn.microsoft.com/en-us/graph/throttling-limits strongly suggest that the limits are applied within the "hosting" tenant and the service principal instance...as follows.

In this section, the term tenant refers to the Microsoft 365 organization where the application is installed. This tenant can be the same as the one where the application was created in the case of a single-tenant application, or it can be different in the case of a multi-tenant application.

For further clarity - the particular API and limit in question is for OneDrive, which directs in turn to https://learn.microsoft.com/en-us/sharepoint/dev/general-development/how-to-avoid-getting-throttled-or-blocked-in-sharepoint-online

Thanks for you help,

Ralph

Answer 1

There's still no clarity if any limits are applied to the multi tenant app registration itself, or if limits are only applied to the enterprise applications that consented to the main app registration.