I missed deadline to extend graph API use, is there anything I can do in the meantime?

BRISKOVIC, KOL 20 Reputation points
2025-04-14T19:58:30.26+00:00

Per the below article graph API has become deprecated and I was supposed to extend its use by February which I did not.

https://learn.microsoft.com/en-us/graph/migrate-azure-ad-graph-overview

I tried the steps to extend from the below article:

https://learn.microsoft.com/en-us/graph/applications-authenticationbehaviors?tabs=http#allow-extended-azure-ad-graph-access-until-june-30-2025

I tried option 1 and 2. When I call the below API I get Insufficient privileges. I got an access token using client_credentials and have permissions for Application.ReadWrite.All.

PATCH https://graph.microsoft.com/beta/applications/5c142e6f-0bd3-4e58-b510-8a106704f44f/authenticationBehaviors Content-Type: application/json { "blockAzureADGraphAccess": false }

I understand i need to remediate and use Microsoft Graph however can I still extend in the meantime?

Microsoft Security | Microsoft Entra | Microsoft Entra ID
{count} votes

Accepted answer
  1. Navya 19,795 Reputation points Microsoft External Staff Moderator
    2025-04-15T20:08:55.8233333+00:00

    Hi @BRISKOVIC, KOL

    By default, applications created after August 31, 2024, will receive a 403 Unauthorized error when making requests to Azure AD Graph APIs unless explicitly configured to allow extended access. For applications created before this date, extended access must be configured by February 1, 2025 to continue using Azure AD Graph. This access is only valid until June 30, 2025, after which all requests to Azure AD Graph APIs will be blocked, regardless of configuration.

    I understand i need to remediate and use Microsoft Graph however can I still extend in the meantime?

    No, you can't extend Azure AD Graph APIs at this point. The extension must be configured by February 1, 2025, and it cannot be applied afterward.

    In your current scenario, you’ll need to start using Microsoft Graph now, as the extension for Azure AD Graph access was not configured. If the extension had been set up before the deadline, you would have been able to continue using Azure AD Graph until June 30, 2025.

    Hope this helps. Do let us know if you any further queries.


    If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.