Get 403 forbidden to list private channel messages

problem asker 61

I login graph explorer with admin user to try list teams channel messages

https://graph.microsoft.com/v1.0/teams/{team-id}/channels/{channel-id}/messages

but when I list a private channel (admin user is not member) or private teams (admin user is not member) messages will get 403 Forbidden.

Is only member can list private team or private channel messages?
There has any solution for admin user to list private team or private channel messages? (admin not member, and I don't want admin user become those teams/channels member)

Thanks!

Accepted answer

HarmeetSingh7172 4,811 Reputation points

2022-02-11T11:51:26.09+00:00

Hi @problem asker ,

Any team owner or team member can create a private channel but only members of that private channel can list the messages. Team owners can not see the files, conversations or the member list of a private channel. You can check this documentation to know more.

Alternatively, you can use application permissions but that fall under Protected APIs.

Before calling this API with application permissions, you must request access. For details, see Protected APIs in Microsoft Teams.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have further questions about this answer, please click "Comment".
Please sign in to rate this answer.
problem asker 61 Reputation points

2022-02-13T13:36:40.027+00:00

Thanks Harmeet,

I read some related documents,

When I use application permission (have ChannelMessage.Read.All permission) I get response below:

{
"error": {
"code": "Forbidden",
"message": "Invoked API requires Protected API access in application-only context when not using Resource Specific Consent. Visit https://learn.microsoft.com/en-us/graph/teams-protected-apis for more details."
}
}

And I don't know how to using Resource Specific Consent for application permissions, I read this documentation, it means I need to install a custom app with RSC on my teams channel if I want to list messages?
Is there has easy way to list messages (protect API) by application permissions? (not install custom app on teams)
And not prefer fill this request form.

And I try delegated permissions (auth code/device code/password), I could list standard channel message, but can't list private channel messages (login user is not member), it is like you mention on this documentation.
So if I use delegated permissions, there has no way to list private channel (not member) messages?
Sign in to comment

1 additional answer

CarlZhao-MSFT 40,311 Reputation points

2022-02-11T10:20:11.183+00:00

Hi @problem asker

This is an expected error, only the owner or member of a private channel can list private channel messages, and as far as I know there is currently no support for listing private channel messages using application permissions. I suggest you submit user voice seek support from the Microsoft Graph product team.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
problem asker 61 Reputation points

2022-02-13T13:13:18.11+00:00

Thanks Carl, I have ChannelMessage.Read.All permission, and get 403 forbidden when list private channel messages (admin user not member)

It works if I list standard channel messages~

CarlZhao-MSFT 40,311 Reputation points

2022-02-15T09:35:25.05+00:00

Hi @problem asker This is an expected error, only the owner or member of a private channel can list private channel messages, and as far as I know there is currently no support for listing private channel messages using application permissions. I suggest you submit user voice seek support from the Microsoft Graph product team.

problem asker 61 Reputation points

2022-02-15T09:43:52.987+00:00

ok, thanks carl!

Ramjot Singh 861 Reputation points Microsoft Employee

2022-02-15T09:50:31.657+00:00

List channel messages in application context is allowed. Requires protected API access however.

CarlZhao-MSFT 40,311 Reputation points

2022-02-15T09:56:39.667+00:00

@Ramjot Singh Can you provide detailed documentation to support this? Because I tested it with application permissions and it doesn't seem to work.

Ramjot Singh 861 Reputation points Microsoft Employee

2022-02-15T10:11:22.7+00:00

It's the same as any other list channel messages nothing special about it https://learn.microsoft.com/en-us/graph/api/channel-list-messages?view=graph-rest-1.0&tabs=http Similar public channels, this call also requires Protected API access

problem asker 61 Reputation points

2022-02-16T08:47:19.76+00:00

as my reply to HarmeetSingh,
I tried list message with application permission, but get Forbidden response:

{
"error": {
"code": "Forbidden",
"message": "Invoked API requires Protected API access in application-only context when not using Resource Specific Consent. Visit https://learn.microsoft.com/en-us/graph/teams-protected-apis for more details."
}
}

And I don't know how to using Resource Specific Consent for application permissions, I read this documentation, it means I need to install a custom app with RSC on my teams channel if I want to list messages?

Ramjot Singh 861 Reputation points Microsoft Employee

2022-02-16T12:39:19.89+00:00

Yes. Your app must be installed in the team whose messages you are trying to access. However, private channel access is not allowed using RSC (this is to prevent a potential privacy issue). So, the only option is to apply for protected API.

problem asker 61 Reputation points

2022-02-17T05:02:17.51+00:00

ok, thanks Ramjot and Carl~
Sign in to comment

Share via

Get 403 forbidden to list private channel messages

1 additional answer