question

SergeiLoginov-6041 avatar image
0 Votes"
SergeiLoginov-6041 asked parth-6020 edited

ResourceNotFound error when calling https://graph.microsoft.com/v1.0/me/people

Hello!
We have a multi tenant application registered in Azure Active Directory. 'Tenant A' is a home tenant for application, 'Tenant B' is a another tenant. Application object contains the following API permissions:
212215-image.png

We've given admin consent to these permissions for both tenants (A and B):
212129-image.png

But we observe the following responses for following graph api requests:

On behalf of user in tenant A:
/me - OK
/users - OK
/me/people - OK
/me/calendars - ErrorAccessDenied (Access is denied. Check credentials and try again)

All these response are expected since we have User.Read, User.ReadBasic.All and People.Read permissions, but don't have Calendars.Read permissions

On behalf of user in tenant B:
/me - OK
/users - OK
/me/people - ResourceNotFound - Resource could not be discovered.
/me/calendars - ResourceNotFound - Resource could not be discovered.

The main question is why response to '/me/people' request is 'ResourceNotFound' and how to make it works?

And second minor question is we response to '/me/calendars' is also 'ResourceNotFound', but not 'ErrorAccessDenied' like in tenant A?



azure-active-directorymicrosoft-graph-peoplemicrosoft-graph-multi-tenant-mgmt
image.png (31.7 KiB)
image.png (32.4 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

alfredorevilla-msft avatar image
1 Vote"
alfredorevilla-msft answered parth-6020 edited

Hello @sergeiloginov-6041, usually you will get ResourceNotFound when querying /people or /calendars endpoints if the user has no Office licenses assigned. The resource existence check will be done before any security check, that's why you don't get ErrorAccessDenied.

Please take a look to Assign Microsoft 365 licenses to users.



Let us know if this answer was helpful to you or if you need additional assistance. If it was helpful, please remember to accept it so that others in the community with similar questions can more easily find a solution.

· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thank you, @alfredorevilla-msft
The users for that tenant don't have Office license. It seems this is the reason of issue. We'll try to check it,

0 Votes 0 ·

I've checked details and found, that the user has Microsoft Teams Exploratory license, which contains Office Online experience. Is this not enough for /me/people request working? And if no, what does mean Office licenses?

212376-image.png


0 Votes 0 ·
image.png (34.9 KiB)

I've enabled Exchange Online license and /me/people query started working. Thank you!

0 Votes 0 ·

Hello @sergeiloginov-6041, that's great! Thanks for sharing it and let us know if you need additional assistance.

0 Votes 0 ·
parth-6020 avatar image parth-6020 SergeiLoginov-6041 ·

@SergeiLoginov-6041 I am stuck at the same problem, could you please elaborate on how you enabled the Exchange online licenses for the user(s) of a particular tenant, (with the tenant being on Azure active directory in my case).

0 Votes 0 ·