I am trying to access microsoft graph api to send message to a channel in a team. I am using this endpoint https://graph.microsoft.com/beta/teams/{team_id}/channels/{channel_id}/messages. getting 403 forbidden error

Question

I am trying to access microsoft graph api to send message to a channel in a team. I am using this endpoint https://graph.microsoft.com/beta/teams/{team_id}/channels/{channel_id}/messages. getting 403 forbidden error

Simran Panjwani 20

I am trying to access microsoft graph api to send message to a channel in a team. I am using this endpoint https://graph.microsoft.com/beta/teams/{team_id}/channels/{channel_id}/messages.

I have already granted all the API permissions in AAD. I have granted Teamwork.Migrate.All as a application permission in my AAD. User's image

however, i am getting this error

 "code": "Forbidden",
        "message": "Missing role permissions on the request. API requires one of 'Teamwork.Migrate.All'. Roles on the request ''.",

Anonymous

2024-03-27T08:17:33.69+00:00

If you are trying to send a message to a channel in a team, you need to use delegated permission only. Application permissions are only supported for migration.
Simran Panjwani 20 Reputation points

2024-03-27T09:09:35.9833333+00:00

Teamwork.Migrate.All is only available on application permission. How to give delegated permission?

Answer accepted by question author

0 additional answers

Your answer

Anonymous

2024-03-27T08:17:33.69+00:00

If you are trying to send a message to a channel in a team, you need to use delegated permission only. Application permissions are only supported for migration.
Simran Panjwani 20 Reputation points

2024-03-27T09:09:35.9833333+00:00

Teamwork.Migrate.All is only available on application permission. How to give delegated permission?

Answer 1

CarlZhao-MSFT 46,456

Hi @Simran Panjwani

Application permissions are only supported for migration. If you are not importing third-party messages into a team channel that is in a migrated state, do not use application permissions but instead use delegated permissions. Note that don't forget to grant administrator consent after granting permissions to the calling app.

User's image

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.

Simran Panjwani 20 Reputation points

2024-03-27T09:15:06.5233333+00:00

I have already given delegated permission for ChannelMessage.Send. For Teamwork.Migrate.All there is only application permission. Where exactly I need to give delegated permission?
Simran Panjwani 20 Reputation points

2024-03-27T09:27:22.5333333+00:00

Also i am using a personal microsoft account.
CarlZhao-MSFT 46,456 Reputation points

2024-03-27T09:39:26.99+00:00

Sending channel messages using personal accounts is not supported, this only applies to work accounts.
CarlZhao-MSFT 46,456 Reputation points

2024-03-27T09:45:50.8133333+00:00

ChannelMessage.Send delegated permission is enough, next you need to use auth code flow to request an access token.

Or log into Graph Explorer using your work account and call the endpoint directly.
CarlZhao-MSFT 46,456 Reputation points

2024-03-27T09:52:34.96+00:00

Additionally, you will need to ensure that your work account has a valid MS365 license.
Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Anonymous

2024-03-28T01:37:47.2833333+00:00

Hi @Simran Panjwani

If the reply is helpful to you, please try to mark it as an answer to help others who encounter the same issue and read this thread. Thank you for your understanding and patience!