Reset Redemption Status by using Microsoft Graph with App Permissions

Lukas Jung 41 Reputation points
2021-07-09T06:50:21.757+00:00

I try to use the relative new feature of resetting the redemption status of a guest user. My code calls the invitations API of Microsoft Graph, as described here: https://learn.microsoft.com/en-us/azure/active-directory/external-identities/reset-redemption-status

This works as expected, as long as I use delegated / user permissions. But it doesn't seem to work with App Permissions! The invitation API itself works with App Permissions, but this specific feature of resetting the redemption status ends with an error:

   HTTP 403 Forbidden  
   Guest invitations not allowed for your company. Contact your company administrator for more details.  

The app has Directory.ReadWrite.All as well as User.Invite.All permissions granted. And the invitation without the resetRedemption switch works. I used the Beta endpoint of MS Graph - so, i'm aware of the fact that it isn't available on v1.0 endpoint yet.

Is this a known issue?
BR, Lukas

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,774 questions
{count} votes

Accepted answer
  1. CarlZhao-MSFT 37,466 Reputation points
    2021-07-14T06:25:38.653+00:00

    Currently does not support application permissions!

    I have read the doc in detail, and there are detailed instructions in the doc: When you're resetting the status for a B2B guest user, be sure to do so under the user context. App-only calls are currently not supported.

    During public preview, we have two recommendations:

    When you're resetting the user's email address to a new address, we recommend setting the mail property. This way the user can redeem the invitation by signing into your directory in addition to using the redemption link in the invitation.

    When you're resetting the status for a B2B guest user, be sure to do so under the user context. App-only calls are currently not supported.


    If an Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


0 additional answers

Sort by: Most helpful