Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
13,326 questions
Microsoft Graph api for alertRules and alertRecords not working with CloudPC.ReadAll permissions.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(182.40000000000003, 86%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVP%3C/text%3E%3C/svg%3E)
Venkata Praveen Tellajeera
20
Reputation points
Hi Team,
We are trying to alert rules and records using Microsoft Graph apis (beta). Please find below the details:
APIs:
https://graph.microsoft.com/beta/deviceManagement/monitoring/alertRules
https://graph.microsoft.com/beta/deviceManagement/monitoring/alertRecords
Permissions: CloudPC.Read.All
Alerts status is ON in portal. But we are getting 403 forbidden error while accessing these apis. Please let me know if any more permissions or settings to be done.
Thanks in advance.
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(67.2, 10%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYH%3C/text%3E%3C/svg%3E)
Yakun Huang 85 Reputation points2024-03-29T03:04:52.8533333+00:00 hi @Venkata Praveen Tellajeera ,
Since we can't pinpoint the problem with this information alone, please use the https://jwt.ms/ link to parse the token you have obtained and share it with us so that we can better help you solve the problem.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 7.000000000000001%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC3%3C/text%3E%3C/svg%3E)
Carolyne-3676 211 Reputation points2024-04-09T08:41:45.3933333+00:00 @Venkata Praveen Tellajeera Hello! Did you manage to parse the token as advised above? That is the only way to verify the permissions that you have. Based on the documentation, CloudPC.Read.All is the least priviledge required and CloudPC.ReadWrite.All is a higher privilege. Also note that this is supported for delegated(work/school) and app permissions.
-
Venkata Praveen Tellajeera 20 Reputation points
2024-04-10T06:43:16.1333333+00:00 Hi Carolyne, we didn't get approval from our client to parse tokens.
We have already provided CloudPC.Read.All permissions (delegated and application) to the service principal used, to access these apis. Please let us know if any other permissions required to access this data.
Thanks in advance.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 33%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJ%3C/text%3E%3C/svg%3E)
jhauan 1 Reputation point2024-08-08T08:42:55.8033333+00:00 Can confirm the same issue using managed identity. Get 403 forbidden although the managed identity have the required permissions. (CloudPC.Read.All). Permission type is "Application" as well.
Sign in to comment
Sign in to answer