"ErrorAccessDenied Message: Access is denied. Check credentials and try again." When I try to get events in my email

Question

I encounter error message "ErrorAccessDenied Message: Access is denied. Check credentials and try again." When I try to get calendar events in my email.

var options = new TokenCredentialOptions
{
	AuthorityHost = AzureAuthorityHosts.AzurePublicCloud
};

var clientSecretCredential = new ClientSecretCredential(tenantId, clientId, clientSecret, options);

var graphClient = new GraphServiceClient(clientSecretCredential, scopes);

graphClient.BaseUrl = "https://graph.microsoft.com/beta";
		
var result = await graphClient.Users[{myEmail}].Events.Request().GetAsync();

At the mean time, it works to get calendar, add/delete a calendar event using same setting. It cannot read calendar event or make a webhook subscription for the calendar event updates.

I am using Azure AD to build clientSecretCredential for my web API.

Azure AD API permission:

Any configuration that I need to add?

Please let me know if you need more information to repro this issue.

Answer 1

Hi Anson Tsang

Thanks for reaching out.

I can reproduce your issue in my test tenant, and I have resolved this issue with below approach.

Try to remove & revoke all permission of the specific app and grant the required permissions again. Then execute the Graph API: await graphClient.Users[{myEmail}].Events.Request().GetAsync().

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.

Answer 2

You are using application permissions, thus there is no such thing as "my email" - you need to provide the user's objectID/UPN. The /me endpoint only works for delegate permissions.

Answer 3

Hi, is there somewhere a complete answer? I have exactly the same issue, and I see different forums with all the same questions....

            var options = new TokenCredentialOptions
            {
                AuthorityHost = AzureAuthorityHosts.AzurePublicCloud
            };

            var clientSecretCredential = new ClientSecretCredential(tenantId, clientId, clientSecret, options);
            GraphServiceClient graphServiceClient = new GraphServiceClient(clientSecretCredential, scopes);

            try
            {
                IGraphServiceUsersCollectionPage users = graphServiceClient.Users.Request().GetAsync().Result;
                Console.WriteLine($"Found {users.Count()} users in the tenant");

                User user = null;

                foreach (User loopUser in users)
                {
                    if (loopUser.Mail.ToLower().Contains("car"))
                    {
                        user = loopUser;
                        break;
                    }
                }

                if (user == null) return;

                Console.WriteLine("User: "+ (user.Id + " - " + user.DisplayName));

                IUserRequestBuilder iUserRequestBuilder = graphServiceClient.Users[user.Mail];

                Calendar userCalendar = iUserRequestBuilder.Calendar.Request().GetAsync().Result;
                Console.WriteLine("Calendar: "+ (userCalendar.Id + " - " + userCalendar.Name));

                ICalendarEventsCollectionPage events = iUserRequestBuilder.Calendar.Events.Request().GetAsync().Result;
                Console.WriteLine($"Found {events.Count()} events in the calendar");
            }
            catch (Exception e)
            {
                Console.WriteLine("Exception: " + $"{e}");
            }

Answer 4

any update on this, im stuck with this error now,

curl --location 'https://graph.microsoft.com/v1.0/users/******@p.eu.g/calendar/events' \

--header 'Authorization: Bearer eyJ0eXAiOiJKV1...' \

--header 'Prefer: outlook.timezone="Pacific Standard Time"' \

--header 'Content-Type: application/json' \

--data-raw '{

"subject": "Let'''s go for lunch",

"body": {

"contentType": "HTML",

"content": "Does noon work for you?"
```  },

  "start": {

```sql
  "dateTime": "2017-04-15T12:00:00",

  "timeZone": "Pacific Standard Time"
```  },

  "end": {

```sql
  "dateTime": "2017-04-15T14:00:00",

  "timeZone": "Pacific Standard Time"
```  },

  "location":{

```sql
  "displayName":"Harry'\''s Bar"
```  },

  "attendees": [

```ruby
{

  "emailAddress": {

    "address":"******@gmail.com",

    "name": "Rumaana"

  },

  "type": "required"

}
```  ],

  "allowNewTimeProposals": false,

  "isOnlineMeeting": true

  

}'

this is an example body only but in both original and example i get this 

{

```scala
"error": {

    "code": "ErrorAccessDenied",

    "message": "Access is denied. Check credentials and try again."

}
```}