I want to create a user in UserInformationList using the email (retrieved from GET /users/{id | userPrincipalName}).

Question

I want to create a user in UserInformationList using the email (retrieved from GET /users/{id | userPrincipalName}).

Nandi, Sulagna 0

I need to create a new item in SharePoint using a Logic App. I'm using the HTTP connector and an authentication token obtained from a POST request to https://login.microsoftonline.com/tenant/oauth2/v2.0/token.

In my SharePoint list, some columns are of type Person or Group, which require a Lookup ID. I know that the following endpoint retrieves the Lookup ID from the User Information List for existing users:
GET https://graph.microsoft.com/v1.0/sites/{site-id}/lists/{list-id}/items?$select=Fields&$filter=Fields/EMail eq '******@gmail.com'&$expand=Fields

However, for users who are not yet in the User Information List, I need a way to add them and retrieve their Lookup ID automatically. I did research and get the EnsureUser REST API, but there is no where about the authentications. How can I use the REST APIs in the HTTP Connector?

Ranashekar Guda 2,825 Reputation points Microsoft External Staff Moderator

2025-02-11T15:22:28.9766667+00:00
Hi @Nandi, Sulagna,
Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

To add a user to the User Information List and obtain their Lookup ID using the HTTP Connector in a Logic App, you can follow these steps:

Utilize the EnsureUser REST API to add the user to the User Information List. This API requires an authentication token, which can be acquired from the OAuth2 token endpoint.

Once you have confirmed that the user has been added, you can obtain the Lookup ID by using the previously mentioned GET request. This will enable you to filter by email and retrieve the corresponding Lookup ID from the User Information List.

In your Logic App, you can set up the HTTP Connector to perform these API calls. Make sure to include the appropriate authentication token in the headers for both the EnsureUser and GET requests.

By following these steps, you can automate the process of adding users and obtaining their Lookup IDs in SharePoint.

For additional clarification, please refer to the following documentations:

https://learn.microsoft.com/en-us/sharepoint/dev/sp-add-ins/working-with-lists-and-list-items-with-rest#working-with-list-items-by-using-rest

https://learn.microsoft.com/en-us/azure/communication-services/quickstarts/chat/get-started?pivots=programming-language-power-platform&tabs=windows#create-user

I hope the above provided information will helps in better understanding and solve your issue, if you have any further concerns, please feel free to reach out to us.
Nandi, Sulagna 0 Reputation points

2025-02-11T15:45:07.0433333+00:00
Thank you @Ranashekar Guda for your help.

I am confused with how to get the token.I have a microsoft app registration created with the below API permissions:

I am using the oauth2/v2.0/token endpoint to get the Bearer Token with the client id , secret from the app registration.

I am using this Bearer Token in a GET request, but it gives me error 401 Unsupported app only token.

curl --location 'https://siteURL/_api/web/lists/GetByTitle('\''Test'\'')/items' \ --header 'Accept: application/json;odata=verbose' \ --header 'Authorization: Bearer ••••••'
Shireesha Eeraboina 3,435 Reputation points Microsoft External Staff Moderator

2025-02-14T07:43:16.39+00:00
Hi @Nandi, Sulagna,

I apologize for the delay in response and thank you for your understanding.

To address the issue of obtaining a Bearer Token for accessing SharePoint APIs, make sure that your app registration is configured with the appropriate permissions. The "401 Unsupported app only token" error suggests that the token you are using is likely an application token instead of a delegated user token.

Verify that your app registration is set up to allow user delegation. This usually means configuring permissions that require user consent.

Instead of utilizing the client credentials flow (which generates an app-only token), opt for the authorization code flow to acquire a token that represents a user. This process involves:

Redirecting the user to the Microsoft login page for sign-in.

Once the user signs in, they will be redirected back to your application with an authorization code.

You can then exchange this authorization code for an access token by making a POST request to the token endpoint.

When making a request to the token endpoint, be sure to include the following parameters:

grant_type: Set this to authorization_code.

code: Provide the authorization code you received after user consent.

redirect_uri: Use the same redirect URI that you specified when obtaining the authorization code.

client_id and client_secret: Include your app registration details.

Once you have the access token, include it in your HTTP requests to SharePoint by adding it to the Authorization header as Bearer <token>.

By following these steps, you should be able to successfully obtain the correct token and make requests to the SharePoint API.

For your reference, please review the following documentations for further clarification:

Troubleshoot the SharePoint Online list connector in Azure Data Factory and Azure Synapse

Work with permissions in a lookup list from a SharePoint site

I hope this answers your query! Let me know if you require any additional help or clarification.
Ranashekar Guda 2,825 Reputation points Microsoft External Staff Moderator

2025-02-17T05:26:52.95+00:00

Hi @Nandi, Sulagna,
Just checking in to see if the information above was helpful. If you have any further updates on this issue, please feel free to post them here.
Ranashekar Guda 2,825 Reputation points Microsoft External Staff Moderator

2025-02-18T10:44:08.21+00:00

Hi @Nandi, Sulagna,
Following up to see if you have chance to check my previous response and help us with requested information to check and assist you further on this.

Your answer

Ranashekar Guda 2,825 Reputation points Microsoft External Staff Moderator

2025-02-11T15:22:28.9766667+00:00

Hi @Nandi, Sulagna,
Welcome to the Microsoft Q&A Platform! Thank you for asking your question here.

To add a user to the User Information List and obtain their Lookup ID using the HTTP Connector in a Logic App, you can follow these steps:

Utilize the EnsureUser REST API to add the user to the User Information List. This API requires an authentication token, which can be acquired from the OAuth2 token endpoint.

Once you have confirmed that the user has been added, you can obtain the Lookup ID by using the previously mentioned GET request. This will enable you to filter by email and retrieve the corresponding Lookup ID from the User Information List.

In your Logic App, you can set up the HTTP Connector to perform these API calls. Make sure to include the appropriate authentication token in the headers for both the EnsureUser and GET requests.

By following these steps, you can automate the process of adding users and obtaining their Lookup IDs in SharePoint.

For additional clarification, please refer to the following documentations:

https://learn.microsoft.com/en-us/sharepoint/dev/sp-add-ins/working-with-lists-and-list-items-with-rest#working-with-list-items-by-using-rest

https://learn.microsoft.com/en-us/azure/communication-services/quickstarts/chat/get-started?pivots=programming-language-power-platform&tabs=windows#create-user

I hope the above provided information will helps in better understanding and solve your issue, if you have any further concerns, please feel free to reach out to us.
Nandi, Sulagna 0 Reputation points

2025-02-11T15:45:07.0433333+00:00

Thank you @Ranashekar Guda for your help.

I am confused with how to get the token.I have a microsoft app registration created with the below API permissions:

I am using the oauth2/v2.0/token endpoint to get the Bearer Token with the client id , secret from the app registration.

I am using this Bearer Token in a GET request, but it gives me error 401 Unsupported app only token.

curl --location 'https://siteURL/_api/web/lists/GetByTitle('\''Test'\'')/items' \ --header 'Accept: application/json;odata=verbose' \ --header 'Authorization: Bearer ••••••'
Ranashekar Guda 2,825 Reputation points Microsoft External Staff Moderator

2025-02-17T05:26:52.95+00:00

Hi @Nandi, Sulagna,
Just checking in to see if the information above was helpful. If you have any further updates on this issue, please feel free to post them here.
Ranashekar Guda 2,825 Reputation points Microsoft External Staff Moderator

2025-02-18T10:44:08.21+00:00

Hi @Nandi, Sulagna,
Following up to see if you have chance to check my previous response and help us with requested information to check and assist you further on this.

Share via

I want to create a user in UserInformationList using the email (retrieved from GET /users/{id | userPrincipalName}).

Your answer