how to create Print Job using Graph API with Application Permissions through .Net Core Web API?

Question

how to create Print Job using Graph API with Application Permissions through .Net Core Web API?

Suresh Amsala 20

Hi

I am trying to integrate Universal Print with the Microsoft Graph API in a .NET Core Web API application.

I have Azure Subscription and enable Universal Print on my Azure tenant and registered printer in Universal Print.

Registered application in the Azure portal and added the necessary Delegated and Application permissions (e.g., PrintJob.ReadWrite, Printer.ReadWrite.All) with Grant Admin Consent under Microsoft Graph API.

I am getting "the token does not have one or more required security scopes" at below code.

I have decrypted the token by using jwt.ms and observed that I have sufficient roles those are: "roles": [ "Files.ReadWrite.AppFolder", "Printer.Read.All", "Printer.ReadWrite.All", "PrintJob.Manage.All", "PrintJob.ReadWriteBasic.All", "PrintJob.Read.All", "PrintSettings.Read.All", "PrintJob.ReadWrite.All", "Files.ReadWrite.All", "Files.Read.All", "PrintTaskDefinition.ReadWrite.All", "PrintJob.ReadBasic.All" ] Still I am getting the error.

var res = await _graphServiceClient.Print.Printers[pId].Jobs.PostAsync(pjob);

I am able to make it work this by using .Net Core Web App OpenIDConnect approach and it is pulling Delegated Permissions as scope, and it is asking user consent when running the application.

I would like to make it work with "Application Permissions" (app-only) because this will run in the background as Web API and from my org multiple users will give print request and every time, we could not ask user consent.

I went through the Microsoft Graph API and Universal Print documentation and tried in AI tools but unfortunately, I could not find a way to do this by using Application Permissions in WEB API.

If anyone suggest an approach or solutions that would be appreciated.

Thanks,

Suresh

Accepted answer

0 additional answers

Your answer

Answer 1

Anonymous

Hello Suresh Amsala,

Thank you for reaching out to Microsoft Support!

Looking through the documentation, it is unfortunate that the Graph API endpoint does not support Application permissions, only delegated permissions, as shown below:

User's image

See this document for more details:

https://learn.microsoft.com/en-us/graph/api/printer-post-jobs?view=graph-rest-1.0&tabs=csharp

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.

Suresh Amsala 20 Reputation points

2025-01-02T06:43:24.58+00:00

Hello @Anonymous ,

Thank you for your answer; it is very helpful to me.

Could you please suggest any approaches or examples to achieve this without requiring user consent or obtaining a token in the background by impersonating a user? The goal is to pass the token to a .NET Core Web API with delegated permissions. As I mentioned earlier, multiple users will be requesting prints from the Angular application, and the printing logic will reside in the Web API.

Your assistance would be greatly appreciated.

Thanks,

Suresh
Anonymous

2025-01-03T01:40:57.97+00:00

Unfortunately, there is currently no other way to get a token without the user's consent, and for delegated permission, the user must interactively log in and get the token, perhaps you could open a support ticket with Microsoft Support to get help from the API owner.
Suresh Amsala 20 Reputation points

2025-01-03T03:32:15.4033333+00:00

Is it possible to get delegated permissions with user consent using .net 8.0 core web api? And persist the token as much as long. If it possible could you please provide sample code to do this I tried but unable to promt user login and validate through web api.

Anonymous

you can try creating a token lifetime policy to customize the lifetime of your access token, the maximum duration is 24 hours.

To get user authorization and consent, you can use the Graph SDK, and for delegated permissions, use auth code flow, as follows:

var scopes = new[] { "User.Read" };
// Multi-tenant apps can use "common",
// single-tenant apps must use the tenant ID from the Azure portal
var tenantId = "common";
// Values from app registration
var clientId = "YOUR_CLIENT_ID";
var clientSecret = "YOUR_CLIENT_SECRET";
// For authorization code flow, the user signs into the Microsoft
// identity platform, and the browser is redirected back to your app
// with an authorization code in the query parameters
var authorizationCode = "AUTH_CODE_FROM_REDIRECT";
// using Azure.Identity;
var options = new AuthorizationCodeCredentialOptions
{
    AuthorityHost = AzureAuthorityHosts.AzurePublicCloud,
};
// https://learn.microsoft.com/dotnet/api/azure.identity.authorizationcodecredential
var authCodeCredential = new AuthorizationCodeCredential(
    tenantId, clientId, clientSecret, authorizationCode, options);
var graphClient = new GraphServiceClient(authCodeCredential, scopes);

See the documentation for details:

https://learn.microsoft.com/en-us/graph/sdks/sdks-overview

Share via

how to create Print Job using Graph API with Application Permissions through .Net Core Web API?

0 additional answers

Your answer