scope doesn't exist on the resource error when it does

Question

I am trying to use chatMessage on Microsoft teams using the graph api and I am using several permissions.

I tried to get an access_token several time and succeeded. all of the sudden it started to give me the following error:

"error=invalid_client&error_description=AADSTS650053%3a+The+application+%27upload_meetings%27+asked+for+scope+%27ChatMessage.Read.All%27+that+doesn%27t+exist+on+the+resource+%2700000003-0000-0000-c000-000000000000%27.+Contact+the+app+vendor."

I contacted the app vendor who assured me that the permission is most definitely on the resource. I even saw it on the app. here is his screen shot:

How do I get rid off this wrong error and continue with my very slow, turbulent journey of being a Microsoft Graph user, in the faint hope that it will one day do what I need it to do?

Answer 1

Hi @support streamitup.co.il

To access protected APIs using application permissions, you need to complete a request form to request access.

Note that this restriction is specific to application permissions only, not delegated permissions.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.

Answer 2

That particular permissions is considered "protected" and before you can leverage it, the app needs to be whitelisted by Microsoft. Refer to this article for more details: https://learn.microsoft.com/en-us/graph/teams-protected-apis