Well, according to the documentation, only application permissions are supported for that query, so it shouldn't even work in the Graph explorer. Not sure if bug, improperly documented feature or anything else, but I will ping few people as it's interesting to know the answer here :)
Why does https://graph.microsoft.com/v1.0/sites need a blank search parameter to return a list of sites?
According to docs, you should be able to make a request to
https://graph.microsoft.com/v1.0/sites and get a list of your Sharepoint sites back. Both in the Graph API explorer and with my own HTTP requests, this seems to always return an empty list.
However, if I add a blank
search parameter (i.e. make a request to
https://graph.microsoft.com/v1.0/sites?search=), I do get all of my sites back.
Is that a bug or a feature? Do you need to include an empty
search parameter for other endpoints in the Graph API?