ResourceNotFound error when calling https://graph.microsoft.com/v1.0/me/people

Question

Hello!
We have a multi tenant application registered in Azure Active Directory. 'Tenant A' is a home tenant for application, 'Tenant B' is a another tenant. Application object contains the following API permissions:

We've given admin consent to these permissions for both tenants (A and B):

But we observe the following responses for following graph api requests:

On behalf of user in tenant A:
/me - OK
/users - OK
/me/people - OK
/me/calendars - ErrorAccessDenied (Access is denied. Check credentials and try again)

All these response are expected since we have User.Read, User.ReadBasic.All and People.Read permissions, but don't have Calendars.Read permissions

On behalf of user in tenant B:
/me - OK
/users - OK
/me/people - ResourceNotFound - Resource could not be discovered.
/me/calendars - ResourceNotFound - Resource could not be discovered.

The main question is why response to '/me/people' request is 'ResourceNotFound' and how to make it works?

And second minor question is we response to '/me/calendars' is also 'ResourceNotFound', but not 'ErrorAccessDenied' like in tenant A?

Answer 1

Hello @Sergei Loginov , usually you will get ResourceNotFound when querying /people or /calendars endpoints if the user has no Office licenses assigned. The resource existence check will be done before any security check, that's why you don't get ErrorAccessDenied.

Please take a look to Assign Microsoft 365 licenses to users.

Let us know if this answer was helpful to you or if you need additional assistance. If it was helpful, please remember to accept it so that others in the community with similar questions can more easily find a solution.