Microsoft Graph Java API FindRoomLists question

Leo Kishore 1

I am having an issues with , I get 'Access is denied. Check credentials and try again.', Places calls are working along with other calls but as the documentation states either. My permissions are Calendars.ReadWrite, place.read.all, user.read, user.read.all. Is this call working for others?

I am using both the FindRoomLists call exactly as it is in the documentation and also the customRequest with the url. It clearly seems to be hitting the beta URL but unless there is another permission I need to turn on, not sure why this is not responding with data.

Shiva Keshav Varma 401 Reputation points

2020-12-14T16:07:24.867+00:00

Could you please share the call that you are using and request id and timestamp for that failed request and also share the code how you are getting the access token if its App context or user context.
Leo Kishore 1 Reputation point

2020-12-14T17:36:43.097+00:00

//IUserFindRoomListsCollectionPage findRoomLists = graphServiceClient.me()
// .findRoomLists()
// .buildRequest()
// .get();

String request;
request="/me/findRoomLists";
JsonObject obj = graphServiceClient.customRequest(request).buildRequest().get();

This is the code part.

Leo Kishore 1

Here is the authentication part. Just how the sample did


URL url = new URL(tokenEndpoint);
HttpURLConnection conn = (HttpURLConnection) url.openConnection();
String line;
StringBuilder jsonString = new StringBuilder();

conn.setRequestProperty("Content-Type", "application/x-www-form-urlencoded; charset=UTF-8");
conn.setRequestMethod("POST");
conn.setDoInput(true);
conn.setDoOutput(true);
conn.setInstanceFollowRedirects(false);
conn.connect();
OutputStreamWriter writer = new OutputStreamWriter(conn.getOutputStream(), "UTF-8");
String payload = 

String.format("grant_type=%1$s&scope=%2$s&client_id=%3$s&username=%4$s&password=%5$s&client_secret= %6$s",
        grantType,
        resourceId,
        clientId,
        username,
        password,
        clientSecret);

Leo Kishore 1

private void GetAuthenticatedClient()
 {
     if (graphClient == null) {
         try {
             accessToken = GetAccessToken().replace("\"", "");
             IClientConfig mClientConfig = DefaultClientConfig.createWithAuthenticationProvider(new TestBaseAuthenticationProvider(accessToken));


             graphClient = GraphServiceClient.fromConfig(mClientConfig);
         }

1 answer

Ryan Hill 25,476 Reputation points Microsoft Employee

2020-12-16T19:49:15.047+00:00

Hi @Leo Kishore ,

I would check to make sure you get a result for findRooms at https://developer.microsoft.com/en-us/graph/graph-explorer with the credentials you're using. A stretch could be a policy on your Azure AD tenant, like MDM, that could be blocking the request. I would also verify that your accessToken does indeed have the appropriate scopes needed.

Regards,
Ryan
Please sign in to rate this answer.
Leo Kishore 1 Reputation point

2020-12-16T20:10:15.72+00:00

Yep, I just checked and signed into that link and beta/me/findRoomLists and also beta/me/findRooms both returned JSON lists. So then your thinking there are issues with the accessToken? Which still enables other calls to work?

Ryan Hill 25,476 Reputation points Microsoft Employee

2020-12-16T20:17:20.22+00:00

Correct. Being signed into the graph explorer, I would compare the authentication token. You use something like https://jwt.io to verify the scopes associated with the token.

Regards,
Ryan

Leo Kishore 1 Reputation point

2021-02-11T15:06:39.6+00:00

Hey, I'm coming back for more! You said to check out the access token and see what access I have. I did so as I am also having issues writing an event to a calendar where Calendar.readwrite SHOULD give me access to save an event I think. So I checked the two tokens, kind of different. Is this due to how I am trying to log in?

Leo Kishore 1 Reputation point

2021-02-11T15:08:32.26+00:00

This one is when I log into graph explorer. next is from that app.

"appidacr": "1", "idp": "https://sts.windows.net/b1c14d5c-3625-45b3-a430-9552373a0c2f/", "idtyp": "app", "oid": "69adff06-af35-48d5-a229-a3139a88ccf1", "rh": "0.AAAAXE3BsSU2s0WkMJVSNzoML5BKYjmaOI5Hv4QgBG90BrpXAAA.", "roles": [ "Place.Read.All", "User.Read.All", "Calendars.ReadWrite" ], "sub": "69adff06-af35-48d5-a229-a3139a88ccf1", "tenant_region_scope": "NA", "tid": "b1c14d5c-3625-45b3-a430-9552373a0c2f", "uti": "z5rr1084rUKy06o_iKYXAA", "ver": "1.0", "xms_tcdt": 1368012527 }

Leo Kishore 1 Reputation point

2021-02-11T15:14:57.947+00:00

here is from the app

{
"scp": "Calendars.ReadWrite Contacts.ReadWrite DeviceManagementApps.ReadWrite.All DeviceManagementConfiguration.Read.All DeviceManagementConfiguration.ReadWrite.All DeviceManagementManagedDevices.PrivilegedOperations.All DeviceManagementManagedDevices.Read.All DeviceManagementRBAC.Read.All DeviceManagementRBAC.ReadWrite.All DeviceManagementServiceConfig.Read.All DeviceManagementServiceConfig.ReadWrite.All Directory.AccessAsUser.All Directory.ReadWrite.All Files.ReadWrite.All Group.ReadWrite.All IdentityRiskEvent.Read.All Mail.ReadWrite MailboxSettings.ReadWrite Notes.ReadWrite.All openid People.Read profile Reports.Read.All SecurityEvents.Read.All Sites.ReadWrite.All Tasks.ReadWrite TeamsTab.Create TeamsTab.ReadWrite.All User.Read User.ReadBasic.All User.ReadWrite User.ReadWrite.All email",

}
Sign in to comment