Graph API permissions issue

Question

Hi,

I am trying to get WorkingHours from Mailbox settings for my users. I have set the API permissions in Azure, and in Graph Explorer and if I run the below query with my email address it works fine. But as soon as I change the email address to one of my users it errors as per the screenshot. Both Azure and Explorer say I've consented so I'm a bit bemused.

https://graph.microsoft.com/v1.0/users/blah[@](/users/na/?userId=90ae04c7-7ffe-0003-0000-000000000000).com.au/mailboxsettings/workinghours

To confuse things even more, if I use Connect-MGGraph with a certificate I can pull these details out for each person, but as I am doing this as part of a login script to update the Outlook signature the Connect-MGGraph option is not feasible.

Answer 1

Hi @John McGuigan

Graph Explorer does not support calling the /users/{user id} endpoint, you can only use it to call the /me endpoint: me/mailboxsettings/workinghours.

The /users/{user id} endpoint is usually adapted to the application context, so you should grant your application the MailboxSettings.Read application permission in Azure AD, then use the client credentials flow to get the token and call the /users/{id|userPrincipalName}/mailboxsettings/workinghours api endpoint in postman.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

I seem to be able to reproduce this, let me see if I can bring some help.