Trying to read all user mailbox using graph apis

Question

Having a Single page application or a Web Application which allows admin to login to their microsoft account and provide consent to read users, mailboxes and get access token for the same.

Once thats done, able to read all users and for each user trying to read mailbox.

But apart from the user that has consented, unable to read any other user mailbox although the permissions are provided.

Following error is recvd when trying to read

{\'error\':{\'code\':\'ErrorItemNotFound\',\'message\':\'The specified object was not found in the store., Default folder AllItems not found.\',\'innerError\':{\'date\':\'2023-06-15T10:01:56\' ,\'request-id\':\'dfcf7847-73e8-4bff-a6a1-df6a32401f20\',\'client-request-id\':\'dfcf7847-73e8-4bff-a6a1-df6a32401f20\'}}}

Answer 1

Hello @Arun S !

Welcome to Microoft QnA!

can you kindly check this Thread :

https://learn.microsoft.com/en-us/answers/questions/1117745/the-specified-object-was-not-found-in-the-store-de

To read emails from other users within the tenant, you need to use the Mail.Read application permission, because the /users/{user id} endpoint only supports application context.

Then use the daemon-based client credentials flow to obtain an access token.

Call the API endpoint:

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

I hope this helps!

Kindly mark the answer as Accepted and Upvote in case it helped!

Regards

Answer 2

Have followed the following pre-requisites to access user mailboxes through Graph API as

• Assign API permissions to access your Exchange Online mailboxes from the following window

• Select Graph ‘Application permission’ for the purpose of mailbox access as below:

• Select the following permissions and save

• Grand Admin Consent to the selected permissions in the tenant. Finally, your permissions page will show as follows

Also, please refer the following article in my blog to see a similar requirement as yours

Create Custom Folder in Exchange Online Mailboxes using Graph API using Windows PowerShell

---

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 3

Yes, i have followed the pre requisites and provided the application permissions.

I am using One Org App to read Emails from Other Organisation using Client Credentails Flow by mentioning the required scope and getting consent by the admin.

The Application used for the flow has all the permissions required to read.

Answer 4

Is there a way to indicate DELEGATE or APPLICATION Permission scope when trying to get Access token using OAUTH?

I did read some where in the documentation which mentions that Mail read works only with Application permissions for other users.