This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 5%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EBK%3C/text%3E%3C/svg%3E)
I could access my SharePoint lists and perform some operations via the console application (.net framework). Since MFA is available here, I created an app password for my account and was connecting via the console app. But for the last few months I've been having trouble connecting and was getting an error saying the username and password were incorrect. I then created an application registration in Azure AD and by creating an access token I can now connect to lists with graph endpoints. but here I cannot access the data at /_api/web/siteusers. Please support me on this matter.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(211.20000000000002, 35%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
Does the AD app registration have any restrictions in terms of site.seleted or permissions not being full control? Also for SharePoint.sites there is the delegated app permissions now, I have tried it personally just check whether application or delegated permissions have been granted.
Check this post out https://learn.microsoft.com/en-us/answers/questions/1069286/connect-to-sharepoint-online-without-basic-authent, it mentions client secret won't work with tokens granted application permissions obtained from Azure AD using client ID and client secret and certificate has to be used.
Also, check out the video https://youtu.be/TFeI-yMfg0w?si=iWL0BiyQRNhx9N8Thow to use certificate
There is no problem with the authorizations, on the contrary, I get an unauthorized error even though I provide token information. I also get an error(unsupported app only) when I send a request to /_api/web/siteusers with the access token I received from Postman.
I have tried accessing the siteusers endpoint using clientid and certificate using PnP PowerShell and it works.
The entra app registration has the following permissions
Give it a try to rule out that entra registration has the required permissions.
Connect-PnPOnline reshmeeauckloo.sharepoint.com -ClientId e0c7944e-bccb-40dd-a220-6ebc492c24ca -Tenant contoso.onmicrosoft.com -CertificateBase64Encoded $encodedPfx
#Connect-PnPOnline -url $siteurl -Interactive
$RestMethodUrl = '/_api/web/siteusers'
$users = (Invoke-PnPSPRestMethod -Url $RestMethodUrl -Method Get).Value
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(252.8, 5%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
Hi @Buse Kara,
Would you tell me whether your issue has been resolved or have any update? If you have any questions or progress, you can contact me in time.
Dear Reshmee, thank you for your support. I solved the problem as in the article. However, this method is valid until 2026. This is bad news unfortunately.
https://learn.microsoft.com/tr-tr/sharepoint/dev/solution-guidance/security-apponly-azureacs
Dear @RaytheonXie_MSFT , do you know how to get the password of the certificate in certified method ?