How can I create a change notification subscription with other users resources?

Question

I am trying to create an application that would allow admins to log in to their Microsoft account and create a change notification subscription with other user resources in the subscription request. I have attempted to create the subscription using the code below:

const subscription = {
       changeType: 'created,updated',
       notificationUrl: notificationUrl,
       lifecycleNotificationUrl: lifeNotificationUrl,
        resource: `/users/${userPrincipalName}/mailfolders('inbox')/messages?$select=sender,subject,bodyPreview`,
       expirationDateTime: expirationDateTime,
       clientState: clientState,
       applicationId: appId,
       creatorId: userId,
       includeResourceData: true,
       encryptionCertificate: encryptionCertificate,
       encryptionCertificateId: encryptionCertificateId,
};

await client.api('/subscriptions').post(subscription);

The userPrincipalName in this case refers to the target user. I have added the permission shown in the image below to the application: However, I am receiving the error message: Error: Operation: Create; Exception: [Status Code: Forbidden; Reason: Access is denied. Check credentials and try again.] What am I doing wrong, and how can I resolve this issue?

Answer 1

Hi @Syifa Prasetyo ,

Thanks for reaching out!!!

To create a subscription with message resources, the application needs to have the appropriate delegated or application permissions for the resource specified in the subscription request.

As I can understand that you are trying to subscribe to other Users' resources, you need to have application permission -Mail.ReadBasic, Mail.Read and the user or admin has to grant consent for the application to access the specified resource.

To resolve this issue, please ensure that it has the necessary permissions and consent to access the resource specified.

Document Reference: https://learn.microsoft.com/en-us/graph/outlook-change-notifications-overview#request-permissions

Hope this helps. If the answer is helpful, please click "Accept Answer" and kindly Upvote. If you have further questions about this answer, please click "Comment".