graphapi permission

Question

For my application now i set specified mail as dashmagiq.vidyatech.in.Here anyone can change the mail id and take data from other mail id(just by change the email id in the code)Here i want to give permission only to access the dashmagiq.vidaytech.in mail id and if i put other mail id vidyatech.in domain it should give output as no authorization to access this mail id in the code. Because anyone can access all mailbox under this organisation by using this code.But no issue by reading dashmagiq.vidyatech.in mail id by any user(no security issue).So need a solution that how can i give permission to access only specific mail id..

Answer 1

Try the new role based application access controls
https://techcommunity.microsoft.com/t5/exchange-team-blog/announcing-public-preview-of-role-based-access-control-for/ba-p/3688228

or the older application access policies and scope the Azure app to just the allowed mailbox

https://learn.microsoft.com/en-us/graph/auth-limit-mailbox-access