Share via

Graph API use the search API with a managed identity

Tim 156 Reputation points
2022-10-14T15:50:28.667+00:00

I might want to run a query against Graph API from a Logic App to search sharepoint for URLs, to do so I want to use a system-assigned identity, which will be given permissions to query sharepoint.

However, when I read https://learn.microsoft.com/en-us/graph/api/resources/search-api-overview?view=graph-rest-1.0 it explicitly says:

'Search requests run in the context of the signed-in user, identified using an access token with delegated permissions.'

While I have the idea that the managed identity will have application permissions and not delegated permissions. Does this mean that the managed identity will not be able to use this endpoint at all? Or is this wrongly documented?

Azure Logic Apps
Azure Logic Apps
An Azure service that automates the access and use of data across clouds without writing code.
3,542 questions
Microsoft Security Microsoft Entra Microsoft Entra ID
0 comments
Accepted answer
  1. Cristian SPIRIDON 4,486 Reputation points Volunteer Moderator
    2022-10-16T11:49:25.057+00:00

    Hi,

    You are right. You need to use delegated permissions for that API - managed identity will not work.

    There are some other discussions on this issue:

    https://learn.microsoft.com/en-us/answers/questions/633759/microsoft-graph-search-api-not-availalbe-with-appl.html

    Hope this helps!

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.