Forbidden Message: Application with AAD App Id '{AAD App Id}' is not authorized to generate notifications about '{entityUrl}' to the recipient. Ensure that the expected Teams app is installed in the target scope (user, team, or chat)

Shuo Qiu (Wicresoft) 1 Microsoft Vendor

I got an error when I tried to send teams activity notification to a user in a team.

The API is POST /teams/{teamId}/sendActivityNotification

The error message said Forbidden Message: Application with AAD App Id '{AAD App Id}' is not authorized to generate notifications about '{entityUrl}' to the recipient. Ensure that the expected Teams app is installed in the target scope (user, team, or chat).

But I do have installed the app for the team that the recipient at before I sent notification. And I have been granted TeamsActivity.Send permission by Microsoft.

However, if the recipients uploaded the app package to their personal space (Apps -> Manage your apps -> Upload an app -> Upload a custom app), then they can successfully receive the activity notification though the API I used is POST /teams/{teamId}/sendActivityNotification. That doesn't make sense. It should check whether the app is installed in the team scope rather than user scope.

Sayali-MSFT 2,266 Reputation points Microsoft Vendor

2022-12-13T05:26:03.12+00:00

@ShuoQiuWicresoft-4958- Thanks for reporting your issue.
We will investigate this issue and get back to you.
Sayali-MSFT 2,266 Reputation points Microsoft Vendor

2022-12-15T08:32:15.78+00:00
Have you followed the requirement for sending activity feed notifications:
Activity feed APIs work with a Teams app. The following are the requirements for sending activity feed notifications:

The Teams app manifest must have the Azure AD app ID added to the webApplicationInfo section.

Activity types must be declared in the activities section. For details, see manifest schema.

The Teams app must be installed for the recipient, either personally, or in a team or chat they are part of. For more information, see Teams app installation.

You might get an error if multiple Teams apps in the same scope (team, chat or user) are using the same Azure AD app. Make sure that you're using unique Azure AD apps.

We are checking the scenario as mentioned above "It should check whether the app is installed in the team scope rather than user scope"
If it's bug, we raised it accordingly and update you here.

Reference Document-https://learn.microsoft.com/en-us/graph/teams-send-activityfeednotifications?tabs=http#requirements-for-using-the-activity-feed-notification-apis
Sayali-MSFT 2,266 Reputation points Microsoft Vendor

2022-12-26T11:30:17.94+00:00

@Shuo Qiu (Wicresoft) - Did the caller add the Aad app of the graph explorer to your 3P app and sideload it? The caller app's AAD AppId must be part of the webApplicationInfo section. Without it the error is expected.
Also could you please share the manifest json?
Shuo Qiu (Wicresoft) 1 Reputation point Microsoft Vendor

2022-12-26T15:15:08.627+00:00

@Sayali-MSFT Yes, we did add the webApplicationInfo section to our manifest json. I've attached the manifest file. JSON file is not allowed to upload here, so I change it to .TXT.

274067-manifest.txt