Cannot request todo/lists of other users server side?

Question

After assigning the appropriate permissions in the application scope, when we call the link below the response is shown as "InvalidRequest" with "ErrorIncorrectRoutingHint" as the message.

https://graph.microsoft.com/v1.0/users/user@user.com/todo/lists

Does this feature not work yet?

https://graph.microsoft.com/v1.0/users/user@user.com/todo/lists

Answer 1

It is not available for Application permission yet. documentation

The To Do API currently only supports permission delegated by the user and is limited to the current user. This means that you cannot access other users' to-do lists.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.

Answer 2

Hi @Greg Merideth

The "InvalidRequest" error may be due to the fact that you are using delegated permissions, for delegated permissions are only used to access the /me/todo/lists endpoint, if you need to access other users' tasklists, you need to add the application permission(Tasks.Read.All) to the app, and then use OAuth 2.0 client credentials flow, for the detailed use of this flow, you can check the link below, as shown in the figure is my test results.

For more information about the OAuth 2.0 client credentials flow, you can see this link:

https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-client-creds-grant-flow

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.