This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi team,
I was trying to get user’s list of followed sites (using application permissions). But calling GET /me/followedSites endpoint gives "access denied” and not able to know the root cause for this issue. Is something know issue or is it permission related issue.
please find error logs attached for the same.
thanks
Tanvi Mittal
The process of building custom applications and tools that interact with Microsoft SharePoint, including SharePoint Online in Microsoft 365.
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
The process of building custom solutions for SharePoint Server.
An API that connects multiple Microsoft services, enabling data access and automation across platforms
Hi Carl,
is this correct? We have done this and it is still giving same 404 error. Let me know if i am missing something here.
Hi @CarlZhao-MSFT, did you get a chance to look into above settings. Are these correct?
Hi @Tanvi Mittal
404 means that the requested target resource does not exist. Does the logged in user already follow any sites?
Yes, logged in user follow sites.
Try using jwt.ms to decode your access token and share the screenshot.
The access token looks fine. Also, does the logged in user have the necessary MS365 license?
We have O365 E1 license.
Have you already granted this license to the logged in user in Azure AD?
we don't have office 365 E3 Developer license. how we can make it work with existing one.
Exception Type: Microsoft.Graph.ServiceException
Error: Code: accessDenied
StatusCode: Forbidden
RawResponseBody: {"error":{"code":"accessDenied","message":"Access denied","innerError":{"date":"2024-05-06T05:03:33","request-id":"85c976e5-6309-462e-a2d5-89ab8c90d24b","client-request-id":"85c976e5-6309-462e-a2d5-89ab8c90d24b"}}}
Message: Code: accessDenied
Message: Access denied
An error occurred while requesting GET https://itt-tanvim.intimetec.americas:4321/api/sharepoint/sites/. Status: 404
We only receive this error while accesing sharepoint.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 36%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMV%3C/text%3E%3C/svg%3E)
Carl, which licenses you're referring to from this image?
I'm sharing this screenshot just for demonstration, an O365 E1 license is sufficient. Have you granted O365 E1 licenses to logged in users?
In addition, is the URL https://itt-tanvim.intimetec.americas:4321/api/sharepoint/sites/ your custom API? What does it do? Isn't the API you are calling graph API?
yes, o365E1 License is granted to logged in user.
This URL is different, it is used to get sharepoint sites, it is for our application.
we are calling graph api only by GET Me/followedsites, when we debug it, it gives 404 as access denied. Can you check if it is working for you?
Yes, it works for me.
Try logging into Graph Explorer with your user and calling that endpoint to see if it works.
Thanks for your input carl.
I tried it, here it works for me. But i could only see these permission User.Read Unconsent Directory.Read.All Consent Directory.ReadWrite.All Consent User.Read.All Consent User.ReadBasic.All__Consent__ User.ReadWrite Consent User.ReadWrite.All. I wasnt able to see the permission that you have shared in screenshot as Sites.ReadAll and Sites.Readwrite.All. Let me know how to enable that or will it work without this as well.
It will pop up automatically based on the endpoint you called. When you put 'https://graph.microsoft.com/v1.0/me/followedSites' API in the request bar, you will be able to see the corresponding permissions.
Got it carl. I tried with https://graph.microsoft.com/v1.0/me/followedSites api it gave me error here.
Please have a look.
You need to click the "Consent" button to grant the corresponding permissions.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(201.6, 3%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
@CarlZhao-MSFT, the same API had been working for us few months back. Is there any change which has been made during recent times to the Graph API itself?
@CarlZhao-MSFT, please do let us know, if we are missing anything with respect to permission, or any change done to the Graph API recently.
Any suggestion and information will be needful for us.
CarlZhao-MSFT, Let me know if there is other endpoint apart from /me/followedSites that will work for us that we can try once.
Team, any update on this above query. Please let us know your input that will be helpful for us to resolve the issue.
Hi Carl
We have enabled all these settings. And when we are trying to access sharepoint it gives the error as
Exception Type: Microsoft.Graph.ServiceException
Error: Code: accessDenied
Message: Access denied
Inner error:
StatusCode: Forbidden
RawResponseBody: {"error":{"code":"accessDenied","message":"Access denied","innerError":{"date":"2024-05-06T05:03:33","request-id":"85c976e5-6309-462e-a2d5-89ab8c90d24b","client-request-id":"85c976e5-6309-462e-a2d5-89ab8c90d24b"}}}
This are the settings:
Hi @Tanvi Mittal
You need delegated permissions, not application permissions. After that, you need to request the access token using a delegated authentication flow, such as auth code flow or ROPC flow.
Hi @Tanvi Mittal
According to the API documentation, it only supports delegated permissions.
Hope this helps.
If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.