Microsoft Graph API : Status Code: Forbidden, Insufficient privileges to complete the operation.

Question

Hi there,

Not sure how to resolve this error on Title

I am getting this error, when I call this instruction and it's seems that I have given the application permissions

    var results = await _graphServiceClient.Contacts  
        .Request()  
        .GetAsync();  

This is the snap shot of application permission imposed on azure portal

And in the token I presenting before call the graph api is

If I change the code to users, it seems to be running with no problems

    var results = await _graphServiceClient.Users  
        .Request()  
        //.Select(f => f.Contacts)  
        .GetAsync();  

Not sure how to resolve this error and remember I use the free version of Azure.

Thanks,
Holy

Answer 1

Thanks. I hope this is enough.

{
"error": {
"code": "Authorization_RequestDenied",
"message": "Insufficient privileges to complete the operation.",
"innerError": {
"date": "2021-01-04T09:32:12",
"request-id": "a666e0c6-dd9a-4526-8266-f5b9a804bb8a",
"client-request-id": "a666e0c6-dd9a-4526-8266-f5b9a804bb8a"
}
}
}

Answer 2

You need to specify for whom you need to get the contacts. Since you are using App token which has application permissions you need to write the code as shown below.

var contacts = await graphClient.Users["Shiva@nishantsingh.live"].Contacts
                            .Request()
                            .GetAsync();

If you use User token then you need to write the code as shown below.

var contacts = await graphClient.Me.Contacts
                            .Request()
                            .GetAsync();

(If the reply was helpful please don't forget to upvote or accept as answer, thank you)

Answer 3

Hi there,

Now I get this error after changing this code to Me.Contacts. Remember I don't have azure license and I trying here with the basic free version.

Code: ErrorAccessDenied
Message: Access is denied. Check credentials and try again.
ClientRequestId: 174ec2fc-5f90-4d41-91f3-5270b57c56ca

Thanks