How to get email of user if I have an access token with User.Read?

Question

Hi all,

I am able to perform an authorization code flow (see https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-auth-code-flow and https://learn.microsoft.com/en-us/graph/auth-v2-user?tabs=http) to get an access token with the 'https://graph.microsoft.com/User.Read' permission. I ma trying to figure out, using the Java API or using a GET call, how to get a users's email address. So quick questions:

1. Did I request the right permission? If not, what permission should I request?
2. What is the method that I have to call to get this data?

Thanks very much in advance for any help you give!

Answer 1

Hi @GZ

You can obtain the user's email address you want through the List users endpoint. To access this endpoint, User.Read permission is not sufficient. You need to grant User.Read.All permission.

You can refer to this document for more details.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.