Unable to list Users from Graph: Authorization_RequestDenied

Eliel Aguilera 21 Reputation points


I'm having an strange behavior with an app.

Here https://learn.microsoft.com/en-us/graph/api/resources/users?view=graph-rest-1.0 say that I only need Users.ReadBasic.All to get the list. Permission was granted by the admin sometime ago. I see the scope in the JWT but I still get the "Insufficient privileges to complete the operation" error message when trying to access https://graph.microsoft.com/v1.0/users/ endpoint.

Strange thing is that it seems to happens only with new users in the tenant, the old ones seems to work fine.

Any ideas or suggestions?

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,315 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,444 questions
{count} votes

Accepted answer
  1. CarlZhao-MSFT 39,736 Reputation points
    1. Parse your token and make sure it has User.ReadBasic.All delegated permissions, ie "scp": "User.ReadBasic.All".
    2. Make sure your account is a work/school account and not a personal Microsoft account.


    If an Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
  1. RonieDo 6 Reputation points


    I add enough permission but I still have error.

    NOTE: my account is a work account.

    Hope that you can help me about this issue.

    Thank you so much!!!

    1 person found this answer helpful.
    0 comments No comments