This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
We've been running into failures while querying the Graph API set up in hybrid mode (i.e. with Exchange on premises)
Calls like this are failing:
https://graph.microsoft.com/v1.0/users/{USER_ID}/contactFolders/{FOLDER_ID}/contacts/delta
The error message we get is like this:
Error:
code:MailboxNotEnabledForRESTAPI
message:The mailbox is either inactive, soft-deleted, or is hosted on-premise.
innererror:
client-request-id:e62879eb-9570-4e91-96b8-41b210af9258
date:2021-11-10T19:23:20
request-id:e62879eb-9570-4e91-96b8-41b210af9258ResponseHeaders:
[0]:{ Value: ["Wed, 10 Nov 2021 19:23:19 GMT"], Key: "Date" }
[1]:{ Value: ["private"], Key: "Cache-Control" }
[2]:{ Value: ["chunked"], Key: "Transfer-Encoding" }
[3]:{ Value: ["Accept-Encoding"], Key: "Vary" }
[4]:{ Value: ["max-age=31536000"], Key: "Strict-Transport-Security" }
[5]:{ Value: ["e62879eb-9570-4e91-96b8-41b210af9258"], Key: "request-id" }
[6]:{ Value: ["e62879eb-9570-4e91-96b8-41b210af9258"], Key: "client-request-id" }
[7]:
Key:x-ms-ags-diagnostic
Value:
[0]:{"ServerInfo":{"DataCenter":"East US","Slice":"E","Ring":"5","ScaleUnit":"001","RoleInstance":"MN1PEPF00002F25"}}
[8]:{ Value: ["odata.track-changes"], Key: "Preference-Applied" }
Even though this feature is in preview, we were able to get some assistance from Microsoft and they mentioned that the error is essentially a "404 from the Exchange workload".
Anyone else had a similar experience while using the Graph API in hybrid mode? Any help or information is highly appreciated.
Hi, dear @Jaspreet Bakshi
This is because your users lack Office 365 licenses and you need to grant O365 licenses to users.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Carl, thanks for your answer. We really appreciate it.
In our case the Exchange server is on-premises and the Graph API has been set up over the on-prem Exchange server, in hybrid mode. Email messages related endpoints are working. Only calendar and contact related "delta" endpoints are not.
Or maybe you are saying that yes, in hybrid mode delta endpoints will not work, because they require an E3 license? But then I don't understand how that will work because this is a hybrid setup, not one managed on O365.
Hi, @Jaspreet Bakshi
I have no research on the hybrid mode, but I can still reproduce your problem with users who have not been granted O365 licenses, so I think delta endpoint requires your users to be granted O365 licenses. You can grant this license to the user in Azure AD and tell me the test result.
Got it. This issue is actually happening on the tenant of one of our customers and so I can see if they can add the license to O365 (which may not be possible for them to do since all their users have mailboxes on Exchange on-prem). But it may be possible and so I will check with them.
One additional question - the following are my licenses
Delta endpoints work for me even though I don't explicitly have the E3 license. Is that because one of the other licenses also includes that? And to be clear, my mailbox is not in hybrid mode.
Thanks again for your help and answers!
We heard back from them and they can confirm that all the users in question have E3 licenses.
So, it seems like there is something about hybrid mode that is causing delta queries to be rejected.
Hi dear @Jaspreet Bakshi
I'm not sure if this will cover, can you use a user who has not been granted any license to test? In this way, we can rule out whether the problem is caused by the license.
Hi Carl, thanks for your reply. We appreciate it. There are some limits on what we can ask then to do in terms of testing, as this is their production email system. Also, maybe I am missing something, but I am not clear exactly what additional information that will provide. The data points we currently have show that all users have E3 licenses (specifically EMM E3 and O365 E3 licenses for each user), and we can hit email message, contact and calendar endpoints, but cannot hit any delta related endpoints for them. Can you please help me understand what additional information would be obtained by trying to hit a mailbox without any licenses?
This may be a hybrid mode problem. Have you checked the Use REST APIs to access mailboxes in Exchange hybrid deployments (preview) - Microsoft Graph | Microsoft Learn requirements for using Graph in hybrid mode with exchange? That can be a place to start.
Hi Carl,
Thanks for your continued help and answers.
Yes, we have looked at those instructions and pre-reqs, and in fact the admin at our customer end is quite knowledgeable about the concept and has set it up where everything works (except for MS Graph delta queries). I would love it if we could loop in the product team and get some attention on this, as it would be complicated and time-consuming for us to come up with alternatives, and I am sure there are many teams out there in similar situations.
Thanks,
Jaspreet
I discussed this issue with Microsoft today and learned that hybrid support is "still" in preview and it only supports what's documented, but does not include the delta endpoint. This should be the cause of the problem.
Yes, that seems to be the issue. Could you please take feedback to Microsoft requesting that they add support for delta endpoints. There are a significant number of organizations out there that have on-prem Exchange servers but would like to leverage the Graph API. I think it is important for the product team to get that feedback.