Subject: Persistent ID3035 Error with /_api/SPSiteManager/create Despite Correct Permissions

Question

Hello,

I’m attempting to create a SharePoint site using the /_api/SPSiteManager/create endpoint with an Azure AD app that has Sites.FullControl.All permissions. Despite ensuring the token audience is 00000003-0000-0ff1-ce00-000000000000 (or https://[tenant].sharepoint.com) and the request body includes required fields (__metadata, StorageMaximumLevel, etc.), I consistently receive:

{"error_description":"ID3035: The request was not valid or is malformed."}

Details:

• Token: Validated via jwt.io (correct aud/roles).
• Request Body:

jsonCopy

    {
      "request": {
        "__metadata": { "type": "SP.SiteCreationRequest" },
        "Title": "TestSite",
        "Url": "sites/testsite",
        "Lcid": 1033,
        "Template": "STS#3",
        "Owner": "******@domain.com",
        "StorageMaximumLevel": 100
      }
    }

• Headers: Accept: application/json;odata=verbose, Content-Type: application/json.

Answer 1

Hi Amal Nouira,

Good day to you!

I hope you are doing well. Thanks for reaching out to our Microsoft Community Forum.

We would love to help you with your query, however, since it is related to API and SharePoint Development, and our team focuses on queries about SharePoint's built-in features, in order to ensure that you receive accurate technical support, please visit the Microsoft Q&A Community, which is a forum dedicated to API and SharePoint Development, I recommend you post a new thread there for expert help (click "Ask a question" in the upper-right corner and add the tags SharePoint and SharePoint Development in the Tags field).

Please accept my apologies for redirecting you to the above team support, as the moderators in this community have limited resources and knowledge in troubleshooting.

Thanks for your understanding.

George | Microsoft Community Moderator