While get user’s list of followed sites (using application permissions). By calling GET /me/followedSites endpoint gives "access denied”

Tanvi Mittal 0

Hi team,

I was trying to get user’s list of followed sites (using application permissions). But calling GET /me/followedSites endpoint gives "access denied” and not able to know the root cause for this issue. Is something know issue or is it permission related issue.

please find error logs attached for the same.

thanks
Tanvi Mittal

3 answers

CarlZhao-MSFT 44,756 Reputation points

2024-05-07T08:05:15.1666667+00:00

Hi @Tanvi Mittal

According to the API documentation, it only supports delegated permissions.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Tanvi Mittal 0 Reputation points

2024-05-07T09:18:49.58+00:00
Hi Carl

We have enabled all these settings. And when we are trying to access sharepoint it gives the error as
Exception Type: Microsoft.Graph.ServiceException

Error: Code: accessDenied

Message: Access denied

Inner error:

StatusCode: Forbidden RawResponseBody: {"error":{"code":"accessDenied","message":"Access denied","innerError":{"date":"2024-05-06T05:03:33","request-id":"85c976e5-6309-462e-a2d5-89ab8c90d24b","client-request-id":"85c976e5-6309-462e-a2d5-89ab8c90d24b"}}}
Please sign in to rate this answer.
Tanvi Mittal 0 Reputation points

2024-05-07T09:19:41.4066667+00:00

This are the settings:

CarlZhao-MSFT 44,756 Reputation points

2024-05-07T09:35:37.9033333+00:00

Hi @Tanvi Mittal

You need delegated permissions, not application permissions. After that, you need to request the access token using a delegated authentication flow, such as auth code flow or ROPC flow.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Tanvi Mittal 0 Reputation points

2024-05-07T10:24:40.77+00:00

Hi Carl,

is this correct? We have done this and it is still giving same 404 error. Let me know if i am missing something here.
Please sign in to rate this answer.
Tanvi Mittal 0 Reputation points

2024-05-08T03:35:09.1533333+00:00

Hi @CarlZhao-MSFT, did you get a chance to look into above settings. Are these correct?

CarlZhao-MSFT 44,756 Reputation points

2024-05-08T05:47:14.0266667+00:00

Hi @Tanvi Mittal

404 means that the requested target resource does not exist. Does the logged in user already follow any sites?

Tanvi Mittal 0 Reputation points

2024-05-08T05:49:48.81+00:00

Yes, logged in user follow sites.

CarlZhao-MSFT 44,756 Reputation points

2024-05-08T06:00:38.25+00:00

Try using jwt.ms to decode your access token and share the screenshot.

Tanvi Mittal 0 Reputation points

2024-05-08T06:12:18.52+00:00

CarlZhao-MSFT 44,756 Reputation points

2024-05-08T06:39:29.2166667+00:00

The access token looks fine. Also, does the logged in user have the necessary MS365 license?

Tanvi Mittal 0 Reputation points

2024-05-08T06:47:58.0166667+00:00

We have O365 E1 license.

CarlZhao-MSFT 44,756 Reputation points

2024-05-08T07:11:47.65+00:00

Have you already granted this license to the logged in user in Azure AD?

Tanvi Mittal 0 Reputation points

2024-05-08T09:04:01.6566667+00:00

we don't have office 365 E3 Developer license. how we can make it work with existing one.

Tanvi Mittal 0 Reputation points

2024-05-08T09:08:35.8033333+00:00

Exception Type: Microsoft.Graph.ServiceException

Error: Code: accessDenied

StatusCode: Forbidden

RawResponseBody: {"error":{"code":"accessDenied","message":"Access denied","innerError":{"date":"2024-05-06T05:03:33","request-id":"85c976e5-6309-462e-a2d5-89ab8c90d24b","client-request-id":"85c976e5-6309-462e-a2d5-89ab8c90d24b"}}}

Message: Code: accessDenied

Message: Access denied

An error occurred while requesting GET https://itt-tanvim.intimetec.americas:4321/api/sharepoint/sites/. Status: 404

We only receive this error while accesing sharepoint.

Mukul Verma 0 Reputation points

2024-05-08T14:13:10.7766667+00:00

Carl, which licenses you're referring to from this image?

CarlZhao-MSFT 44,756 Reputation points

2024-05-09T02:53:49.3333333+00:00

I'm sharing this screenshot just for demonstration, an O365 E1 license is sufficient. Have you granted O365 E1 licenses to logged in users?

In addition, is the URL https://itt-tanvim.intimetec.americas:4321/api/sharepoint/sites/ your custom API? What does it do? Isn't the API you are calling graph API?

Tanvi Mittal 0 Reputation points

2024-05-09T03:06:46.0033333+00:00

yes, o365E1 License is granted to logged in user.
This URL is different, it is used to get sharepoint sites, it is for our application.
we are calling graph api only by GET Me/followedsites, when we debug it, it gives 404 as access denied. Can you check if it is working for you?

CarlZhao-MSFT 44,756 Reputation points

2024-05-09T07:31:17.6+00:00

Yes, it works for me.

Try logging into Graph Explorer with your user and calling that endpoint to see if it works.

Tanvi Mittal 0 Reputation points

2024-05-09T08:11:18.95+00:00

Thanks for your input carl.
I tried it, here it works for me. But i could only see these permission User.Read Unconsent Directory.Read.All Consent Directory.ReadWrite.All Consent User.Read.All Consent User.ReadBasic.All__Consent__ User.ReadWrite Consent User.ReadWrite.All. I wasnt able to see the permission that you have shared in screenshot as Sites.ReadAll and Sites.Readwrite.All. Let me know how to enable that or will it work without this as well.

CarlZhao-MSFT 44,756 Reputation points

2024-05-09T08:31:35.6066667+00:00

It will pop up automatically based on the endpoint you called. When you put 'https://graph.microsoft.com/v1.0/me/followedSites' API in the request bar, you will be able to see the corresponding permissions.

Tanvi Mittal 0 Reputation points

2024-05-09T08:35:41.8033333+00:00

Got it carl. I tried with https://graph.microsoft.com/v1.0/me/followedSites api it gave me error here.
Please have a look.

CarlZhao-MSFT 44,756 Reputation points

2024-05-09T09:01:50.7266667+00:00

You need to click the "Consent" button to grant the corresponding permissions.

Shantanu Singh 0 Reputation points

2024-05-09T10:41:17.3233333+00:00

@CarlZhao-MSFT, the same API had been working for us few months back. Is there any change which has been made during recent times to the Graph API itself?

Meera E 0 Reputation points

2024-05-17T04:10:33.9766667+00:00

@CarlZhao-MSFT, please do let us know, if we are missing anything with respect to permission, or any change done to the Graph API recently.
Any suggestion and information will be needful for us.

Tanvi Mittal 0 Reputation points

2024-05-17T12:15:37.8933333+00:00

CarlZhao-MSFT, Let me know if there is other endpoint apart from /me/followedSites that will work for us that we can try once.

Tanvi Mittal 0 Reputation points

2024-05-21T03:11:25.5666667+00:00

Team, any update on this above query. Please let us know your input that will be helpful for us to resolve the issue.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.