Adding cross tenant user to a shared channel by Microsoft Graph

Mohammad Jalalian 0

Hi friends,

I want to add a user from a cross-tenant by Microsoft graph to a shared channel. I added the tenant from https://entra.microsoft.com/, External Identities, Cross-tenant Access setting. I used this documentation https://learn.microsoft.com/en-us/graph/api/channel-post-members?view=graph-rest-1.0&tabs=http, example 5, to make an API call for adding a user from cross-tenant org to a shared channel in my tenant. If I use the tenant Id from my org in the message body, I receive this error "Externally authenticated users and guest users are not allowed in shared channels". When I use cross-tenant org tenant Id, I receive this error "User is not allowed to be added due to xTap." CurrentInviteeForbidden. I am pretty sure I should use the tenant Id from the cross-tenant because when I called the service without any tenant Id, I received the error same as the call that I made with my org tenant Id.
Moreover, my code is working for other types of channels, but I need to work with shared channels. Additionally, I can add users manually from cross-tenant org to my shared channel.

Regards,

Meghana-MSFT 3,871 Reputation points Microsoft Vendor

2023-07-21T10:30:43.31+00:00

Thank you for reporting this, we will check this and get back to you.
Meghana-MSFT 3,871 Reputation points Microsoft Vendor

2023-07-24T17:10:03.77+00:00

Could you please share the request id and time stamp when the request is failing?

Mohammad Jalalian 0

Thank you for your consideration

{
    "statusCode": 403,
    "headers": {
        "Transfer-Encoding": "chunked",
        "Vary": "Accept-Encoding",
        "Strict-Transport-Security": "max-age=31536000",
        "request-id": "70cc9f6d-2a71-42a9-aaad-2f8e20688e0c",
        "client-request-id": "70cc9f6d-2a71-42a9-aaad-2f8e20688e0c",
        "x-ms-ags-diagnostic": "{\"ServerInfo\":{\"DataCenter\":\"East US\",\"Slice\":\"E\",\"Ring\":\"5\",\"ScaleUnit\":\"001\",\"RoleInstance\":\"MN1PEPF00002D02\"}}",
        "Date": "Mon, 24 Jul 2023 17:10:52 GMT",
        "Content-Type": "application/json"
    },
    "body": {
        "error": {
            "code": "Forbidden",
            "message": "User is not allowed to be added due to xTap.",
            "innerError": {
                "message": "User is not allowed to be added due to xTap.",
                "code": "CurrentInviteeForbidden",
                "innerError": {},
                "date": "2023-07-24T17:10:53",
                "request-id": "70cc9f6d-2a71-42a9-aaad-2f8e20688e0c",
                "client-request-id": "70cc9f6d-2a71-42a9-aaad-2f8e20688e0c"
            }
        }
    }
}

Meghana-MSFT 3,871 Reputation points Microsoft Vendor

2023-07-27T16:18:21.1133333+00:00

Thank you, we are checking this meanwhile could you please refer this thread where similar issue was reported - https://techcommunity.microsoft.com/t5/microsoft-teams/unable-to-add-guest-user-in-shared-channel/m-p/3290804
Mohammad Jalalian 0 Reputation points

2023-07-27T16:29:34.0533333+00:00

Thank you for your response. I've already read this thread. This is not about using MS Graph to add a cross-tenant user to a Shared Channel. FYI, I can add cross-tenant users to a Shared Channel manually, and I believe both of my tenants have been appropriately configured, at least for doing this manually.
Mohammad Jalalian 0 Reputation points

2023-07-27T16:33:46.0166667+00:00

Thank you for your response. This tread does not have the same problem as mine. I can manually add cross-tenant users to my Shared Channel, but I cannot add them by MS Graph API.
Meghana-MSFT 3,871 Reputation points Microsoft Vendor

2023-07-28T11:19:54.0633333+00:00

We will check this internally and get back to you. Thank you.

1 answer

Mohammad Jalalian 0 Reputation points

2023-08-15T16:16:07.2166667+00:00

Hi,

Do you have any expectations about when you can get me back?
Please sign in to rate this answer.
Meghana-MSFT 3,871 Reputation points Microsoft Vendor

2023-08-29T05:38:46.6533333+00:00

Could you please share recent client-request-id and timestamp? Team needs recent client-request-id and timestamp for further debugging.

Meghana-MSFT 3,871 Reputation points Microsoft Vendor

2023-08-31T17:01:58.31+00:00

@Mohammad Jalalian - Could you please share recent client-request-id and timestamp? Team needs recent client-request-id and timestamp for further debugging.

Mohammad Jalalian 0 Reputation points

2023-09-12T17:18:17.7333333+00:00

I checked one more time. It worked well thank you
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Adding cross tenant user to a shared channel by Microsoft Graph

1 answer

Your answer