I am trying to get the list of mail folders of a user using microsoft graph API but getting an error Access is denied. Check credentials and try again.

Question

I am trying to get the list of mail folders of a user using microsoft graph API but getting an error Access is denied. Check credentials and try again.

Rahul Dewangan 21

API : https://graph.microsoft.com/v1.0/users/******@k4mobility.com/mailFolders

I have created an app in Azure AD and also added the application permission
Mail.ReadWrite but I am getting an error "Access is denied. Check credentials and try again".

Shiva Keshav Varma 426 Reputation points

2020-11-23T13:33:10.757+00:00

Please share the whole error message with request id and timestamp for the failed request.
Rahul Dewangan 21 Reputation points

2020-11-23T17:50:44.667+00:00

Below is the error I am getting.

{
error: {
code: 'ErrorAccessDenied',
message: 'Access is denied. Check credentials and try again.'
}
}
Deva-MSFT 2,271 Reputation points Microsoft Employee

2020-11-23T18:36:31.567+00:00
I see that you're using application permission. So check your token and see whether the user has necessary permissions/scopes to access other user mailbox or not. If not, please add and see if it helps.

You can try to isolate the issue by testing with POSTMAN as well

If issue persists, share the requestid, timestamp of the response for analysis
Rahul Dewangan 21 Reputation points

2020-11-23T18:53:20.65+00:00

file:///home/rahul/Downloads/Screenshot%20from%202020-11-24%2000-16-22.jpg

Please look at the attached screenshot and let me know what do I need to add?
Rahul Dewangan 21 Reputation points

2020-11-23T18:54:35.877+00:00

Please look at the attached screenshot and let me know what do I need to add?
Deva-MSFT 2,271 Reputation points Microsoft Employee

2020-11-24T03:55:29.037+00:00
Ok, so you're providing consent on behalf of your organization. As i updated earlier,

Check your token in https://jwt.ms and see whether the user has necessary permissions/scopes to access other user mailbox or not. If not, please add and see if it helps.

You can try to isolate the issue by testing with POSTMAN as well

If issue persists, share the requestid, timestamp of the response for analysis
Rahul Dewangan 21 Reputation points

2020-11-24T04:09:05.527+00:00

I have added all the permissions according to the docs. Please look at the screenshot.
Rahul Dewangan 21 Reputation points

2020-11-24T07:49:37.017+00:00

This is from Graph Explorer.
{
"error": {
"code": "ErrorAccessDenied",
"message": "Access is denied. Check credentials and try again.",
"innerError": {
"date": "2020-11-24T07:41:41",
"request-id": "2b8e1358-28c9-4586-a2a1-ccfe6039a46c",
"client-request-id": "9e9f4af5-edb4-0d0c-62d7-acd365b42ea8"
}
}
}
Deva-MSFT 2,271 Reputation points Microsoft Employee

2020-11-24T18:04:15.083+00:00

Ok. You need to use App-only (aka client_credentials), this will allow your app to read/write any mailbox on the system. Validate the steps as per the documentation?
Rahul Dewangan 21 Reputation points

2020-11-24T18:06:33.653+00:00

Yep I found that exactly same. I am now using client_credentials grant type ans it is working fine. Thank you for your response.
Deva-MSFT 2,271 Reputation points Microsoft Employee

2020-11-25T04:47:42.367+00:00

Wonderful. Glad to hear that its working now. I will move this to answer. So it can be useful to others too.

Accepted answer

0 additional answers

Your answer

Shiva Keshav Varma 426 Reputation points

2020-11-23T13:33:10.757+00:00

Please share the whole error message with request id and timestamp for the failed request.
Rahul Dewangan 21 Reputation points

2020-11-23T17:50:44.667+00:00

Below is the error I am getting.

{
error: {
code: 'ErrorAccessDenied',
message: 'Access is denied. Check credentials and try again.'
}
}
Deva-MSFT 2,271 Reputation points Microsoft Employee

2020-11-23T18:36:31.567+00:00

I see that you're using application permission. So check your token and see whether the user has necessary permissions/scopes to access other user mailbox or not. If not, please add and see if it helps.

You can try to isolate the issue by testing with POSTMAN as well

If issue persists, share the requestid, timestamp of the response for analysis
Rahul Dewangan 21 Reputation points

2020-11-23T18:53:20.65+00:00

file:///home/rahul/Downloads/Screenshot%20from%202020-11-24%2000-16-22.jpg

Please look at the attached screenshot and let me know what do I need to add?
Rahul Dewangan 21 Reputation points

2020-11-23T18:54:35.877+00:00

Please look at the attached screenshot and let me know what do I need to add?
Deva-MSFT 2,271 Reputation points Microsoft Employee

2020-11-24T03:55:29.037+00:00

Ok, so you're providing consent on behalf of your organization. As i updated earlier,

Check your token in https://jwt.ms and see whether the user has necessary permissions/scopes to access other user mailbox or not. If not, please add and see if it helps.

You can try to isolate the issue by testing with POSTMAN as well

If issue persists, share the requestid, timestamp of the response for analysis
Rahul Dewangan 21 Reputation points

2020-11-24T04:09:05.527+00:00

I have added all the permissions according to the docs. Please look at the screenshot.
Rahul Dewangan 21 Reputation points

2020-11-24T07:49:37.017+00:00

This is from Graph Explorer.
{
"error": {
"code": "ErrorAccessDenied",
"message": "Access is denied. Check credentials and try again.",
"innerError": {
"date": "2020-11-24T07:41:41",
"request-id": "2b8e1358-28c9-4586-a2a1-ccfe6039a46c",
"client-request-id": "9e9f4af5-edb4-0d0c-62d7-acd365b42ea8"
}
}
}
Deva-MSFT 2,271 Reputation points Microsoft Employee

2020-11-24T18:04:15.083+00:00

Ok. You need to use App-only (aka client_credentials), this will allow your app to read/write any mailbox on the system. Validate the steps as per the documentation?
Rahul Dewangan 21 Reputation points

2020-11-24T18:06:33.653+00:00

Yep I found that exactly same. I am now using client_credentials grant type ans it is working fine. Thank you for your response.
Deva-MSFT 2,271 Reputation points Microsoft Employee

2020-11-25T04:47:42.367+00:00

Wonderful. Glad to hear that its working now. I will move this to answer. So it can be useful to others too.

Answer 1

Deva-MSFT 2,271 Microsoft Employee

I see that you're using application permission. So check your token and see whether the user has necessary permissions/scopes to access other user mailbox or not. If not, please add and see if it helps. You can try to isolate the issue by testing with POSTMAN as well
For your scenario, you need to use App-only (aka client_credentials), this will allow your app to read/write any mailbox on the system. Validate the steps as per the documentation and it helped moving forward.

Share via

I am trying to get the list of mail folders of a user using microsoft graph API but getting an error Access is denied. Check credentials and try again.

0 additional answers

Your answer