Hi, I want to access the Planner app from my application to automate the process of downloading tasks..I need Client ID, Client Secret for that, and want to register My application, what to do?

Question

Hi Team,

I need to automate exporting tasks from a Microsoft Planner plan.

Could you please help with creating an App Registration with the following:

App Name: PlannerExportApp

Permissions (Microsoft Graph – Application):

• Group.Read.All
• Tasks.Read.All

Authentication:

• Certificate-based authentication (no client secret preferred)

Tenant ID: [Moderator note: Personally Identifiable Information removed]

Once created, please share:

• Client ID
• Confirmation that admin consent is granted

This will be used to export tasks from Planner plan: [Moderator note: Personally Identifiable Information removed]

Thanks!

 

Hi Team,

I need to automate exporting tasks from a Microsoft Planner plan.

Could you please help with creating an App Registration with the following:

App Name: PlannerExportApp

Permissions (Microsoft Graph – Application):

• Group.Read.All
• Tasks.Read.All

Authentication:

• Certificate-based authentication (no client secret preferred)

Tenant ID: [Moderator note: Personally Identifiable Information removed]

Once created, please share:

• Client ID
• Confirmation that admin consent is granted

This will be used to export tasks from Planner plan:
[Moderator note: Personally Identifiable Information removed]

Thanks!

 

Answer 1

Dear @Sobhana, Surya,

I understand you are looking to register an application named PlannerExportApp in Microsoft Entra ID to automate your Microsoft Planner task exports using certificate-based authentication.

Because the Microsoft Q&A forum is a public community technical support platform, I do not have backend access to your specific Microsoft 365 tenant to create app registrations or grant admin consent for you. These actions must be performed directly by a Global Administrator or an Application Administrator within your own organization.

To achieve your goal immediately, please pass these exact, step-by-step instructions to your company's Microsoft 365 IT administrator:

Step 1: Create the App Registration

1. Sign in to the Microsoft Admin center > Microsoft Entra admin center as an Application Administrator or Global Administrator.
2. Expand App registrations and click new registration.
3. Name the application: PlannerExportApp.
4. Set the supported account types to Accounts in this organizational directory only (Single tenant).
5. Leave the Redirect URI blank and click Register.

Note for the user: Once created, the admin will see the Application (client) ID on the Overview screen.

Step 2: Configure Certificate Authentication (No Client Secret)

1. In the app registration menu on the left, select Certificates & secrets.
2. Go to the Certificates tab and select Upload certificate.
3. Upload the public key certificate file (.cer, .pem, or .crt) provided by your development team, add a description, and click Add.

Step 3: Assign Microsoft Graph Permissions & Grant Consent

1. Select API permissions from the left menu > click Add a permission.
2. Select Microsoft Graph, then choose Application permissions.
3. Search for and check the following permissions:
   • Group.Read.All
   • Tasks.Read.All
4. Click Add permissions.
5. Crucial Step: Click the "Grant admin consent for [Your Organization Name]" button right next to the add button, and select Yes to authorize these application-wide permissions.

When your development team initiates the automation to export tasks from Plan ID, please be aware that the Microsoft Graph Planner API behaves uniquely regarding Application Permissions.

For some Planner endpoints, Microsoft Graph requires Delegated permissions (acting on behalf of a user) rather than Application permissions (daemon/service-level access). If your script throws an HTTP 403 Forbidden error despite having Tasks.Read.All granted, you will need to switch the authentication flow to a delegated method, such as Client Credentials via Resource Owner Password Credentials (ROPC) or a dedicated service account.

For detailed official implementation patterns, you can review the Planner tasks and plans API overview - Microsoft Graph | Microsoft Learn and Microsoft Graph permissions reference - Microsoft Graph | Microsoft Learn

If the implementation steps are unsuccessful or you encounter difficulties at any stage, I recommend asking your IT administrator to raise a ticket with the backend team for more detailed, step-by-step assistance to make the process easier. To raise a ticket, please refer to the following: Get support - Microsoft 365 admin | Microsoft Learn

Thank you so much for your time, and please feel free to reply in the comments if you have any questions. I’ll do my best to assist you within my scope.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".   

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.