How to get access token of Graph explorer using java?

Suraj Dengale 45

I have created one enterprise application that has all the required delegated permissions***(please check the attached screenshot below image)*** but still with these permissions I am not able to read one one-on-one chat message of the signed-in user***(please check the attached screenshot for the error)*** but I can send the message to any chat member using same bearer token.

I checked the Graph Explorer API and with the Graph Explorer bearer token I am able to read those chats.

Can someone please suggest a way to read those chats with my current bearer token if it's possible, if not can you please suggest how I can get graph explorer bearer token using Java. User's image

User's image

1 answer

CarlZhao-MSFT 41,126 Reputation points

2024-03-05T08:36:06.01+00:00

Hi @Suraj Dengale

This is an obvious error, as your error message indicates that your token is missing one of the Chat.Read or Chat.ReadWrite permissions. The Chat.Read and Chat.ReadWrite permissions you assigned to your app in the portal have not yet been granted user or admin consent, so they are not synced to the token.

Before starting, please try clicking the "Grant admin consent for xxxxxx" button in the portal or grant dynamic consent for the above permissions when the user is logged in.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.
Please sign in to rate this answer.
Suraj Dengale 45 Reputation points

2024-03-06T06:54:08.09+00:00

Thanks for your reply. So correct me if I am wrong here :
If an admin grants approval for the below permission once then It won't ask me again and again right??

and if it does then can you please suggest a way around to avoid this popup, I can't ask admin every time to grant me this request and we want to use delegated permission only for security reasons.

CarlZhao-MSFT 41,126 Reputation points

2024-03-06T09:54:41.0766667+00:00

Hi @Suraj Dengale

Yes, when the administrator approves this permission once, the window will not pop up again the next time the user logs in.

However, the Chat.Read or Chat.ReadWrite permission does not require administrator approval, and ordinary users can approve the permission.

Suraj Dengale 45 Reputation points

2024-03-06T09:57:37.4266667+00:00

gotcha Thanks. yes, that's right the admin permission is not required for this Chat.Read permission but why then it showing me that popup. I am not able to understand that

CarlZhao-MSFT 41,126 Reputation points

2024-03-06T10:00:27.16+00:00

Which authentication flow are you using? Can you share the URL?

Suraj Dengale 45 Reputation points

2024-03-06T10:02:44.2266667+00:00

I am using Oauth2.0 Authorization code and I have all the delegated permissions only.

https://learn.microsoft.com/en-us/graph/auth-v2-user?tabs=http

CarlZhao-MSFT 41,126 Reputation points

2024-03-06T10:03:44.5766667+00:00

It's possible that your administrator has disabled user consent permissions so that all permissions must be approved by the administrator. Please contact your administrator to confirm.

CarlZhao-MSFT 41,126 Reputation points

2024-03-06T10:06:42.67+00:00

Suraj Dengale 45 Reputation points

2024-03-06T10:11:43.2766667+00:00

For security reasons I don't think admin would approve the last option but right now we have a second option with us. what do you think? after granting the access to my permission to read users one on one chat, we are good to go? and it won't asked again right?

CarlZhao-MSFT 41,126 Reputation points

2024-03-07T02:41:39.7566667+00:00

Hi @Suraj Dengale

The second option means that you can only consent to permissions that are classified as "low impact" selected by the administrator, and the Chat.Read and Chat.ReadWrite permissions are obviously not included in this list. You still need to contact your administrator to grant administrator consent for your permissions, after which the consent window will not pop up again.

CarlZhao-MSFT 41,126 Reputation points

2024-03-08T09:22:15.7033333+00:00

Hi @Suraj Dengale

Is there anything else I can help you with regarding this issue? If you still need further help, please feel free to let me know. If your question has been solved, then you can click "Accept Answer", which may help members with similar questions find the answer easily. Thank you very much!
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to get access token of Graph explorer using java?

1 answer

Your answer