Microsoft Graph API permistion required to read Selective user emails not everyones email

Question

We required to access selective/group of users email contents not for all users. but now we can read all users email contects using 'Mail.ReadBasic' API permission.

Answer 1

Hi @Ramachandran umapathi

Please refer to Scoping application permissions to specific Exchange Online mailboxes, which can limit your application to only access to the specified mailboxes.

Just use the New-ApplicationAccessPolicy PowerShell cmdlet to configure access control.

New-ApplicationAccessPolicy -AppId e7e4dbfc-046f-4074-9b3b-2ae8f144f59b -PolicyScopeGroupId ******@contoso.com -AccessRight RestrictAccess -Description "Restrict this app to members of distribution group EvenUsers."  

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.