Microsoft Graph service-specific throttling limits

Microsoft Graph concurrently imposes two categories of throttling limits for all API calls:

• Global limits that apply to all services
• Service-specific limits that apply to individual services

Any request can be evaluated against multiple limits, depending on the scope of the limit (per app across all tenants, per tenant for all apps, per app per tenant, and so on), the request type (GET, POST, PATCH, and so on), and other factors. The first limit to be reached triggers throttling behavior.

The following table indicates the global limits:

Request type	Per app across all tenants
Any	130,000 requests per 10 seconds

The rest of this article provides an overview of the service-specific throttling limits for each Microsoft Graph service.

Note

The specific limits described in this article are subject to change.

In this section, the term tenant refers to the Microsoft 365 organization where the application is installed. For a single-tenant application, this tenant can be the same as the one where the application was created; for a multitenant application, it can be a different tenant.

Assignment service limits

Request type	Limit per app per tenant	Limit per tenant for all apps
Any	350 requests per 10 seconds	700 requests per 10 seconds
Any	10,000 requests per 3,600 seconds	20,000 requests per 3,600 seconds
POST /publish	25 requests per 10 seconds	25 requests per 10 seconds

The preceding limits apply to the following resources:

• educationAssignment
• educationSubmission
• trending
• educationResource

Bookings service limits

The Bookings service applies limits to each app ID and mailbox combination, specifically when a particular app accesses a particular booking mailbox. Exceeding the limit for one mailbox doesn't affect the ability of the application to access another mailbox.

Limit	Applies to
Four concurrent requests	v1.0 and beta endpoints

The preceding limits apply to the following resources:

• business
• appointment
• customQuestion
• customer
• service
• staffMember

Cloud communication service limits

Resource	Limits per app
Calls	50,000 requests in a 15-second period, per application per tenant
Meeting information	2,000 meetings/user each month
Presence	10,000 requests in a 30-second period, per application per tenant
Virtual event	750 GET requests per app across all tenants in a 30-second period, and 15 Create, Update, and Delete requests per app across all tenants in a 30-second period.

Call records limits

The limits listed in the following table apply to the following resources:

• callRecord
• participant
• session

Limit type	Limit
Per application for all tenants	15,000 requests per 20 seconds
Per tenant for all applications	10,000 requests per 20 seconds
Per application per tenant	1,500 requests per 20 seconds
Per call record	40 requests per 20 seconds
List call records	40 requests per 20 seconds

PSTN call records limits

The limits listed in the following table apply to the following resources:

• directRoutingLogRow
• pstnBlockedUsersLogRow
• pstnCallLogRow
• pstnOnlineMeetingDialoutReport
• smsLogRow

Limit type	Limit
Per tenant	1,000 requests per 60 seconds
Per application per tenant	200 requests per 60 seconds
Per collection	50 requests per 60 seconds

Excel service limits

For explanations and best practices related to Excel service throttling, see Reduce throttling errors. In addition, following are some throttling limits.

Request type	Limit per app for all tenants	Limit per app per tenant
Any	5000 requests per 10 seconds	1500 requests per 10 seconds

The preceding limits apply to the following resources:

workbook workbookApplication workbookChart workbookChartAreaFormat workbookChartAxes workbookChartAxis workbookChartAxisFormat workbookChartAxisTitle workbookChartAxisTitleFormat workbookChartDataLabelFormat workbookChartDataLabels workbookChartFill workbookChartFont workbookChartGridlines workbookChartGridlinesFormat workbookChartLegend workbookChartLegendFormat workbookChartLineFormat workbookChartPoint workbookChartPointFormat workbookChartSeries workbookChartSeriesFormat workbookChartTitle

workbookChartTitleFormat workbookComment workbookCommentReply workbookFilter workbookFormatProtection workbookNamedItem workbookOperation workbookPivotTable workbookRange workbookRangeBorder workbookRangeFill workbookRangeFont workbookRangeFormat workbookRangeSort workbookRangeView workbookTable workbookTableColumn workbookTableRow workbookTableSort workbookWorksheet workbookWorksheetProtection

Education service limits

Request type	Limit per app for all tenants	Limit per app per tenant
Any	400,000 requests per 20 seconds	35,000 requests per 10 seconds

The preceding limits apply to the following resources:

educationClass educationCourse educationOnPremisesInfo educationOrganization educationRelatedContact educationRoot	educationSchool educationStudent educationTeacher educationTerm educationUser

Exchange message trace service limits

Limit type	Limit
Per tenant	100 requests per 5 minutes

The preceding limits apply to the following resources:

exchangeMessageTrace

Files and lists service limits

For service limits for OneDrive and SharePoint, see Avoid getting throttled or blocked in SharePoint.

The preceding information applies to the following resources:

baseItem baseItemVersion columnDefinition columnLink contentType drive driveItem driveItemVersion fieldValueSet itemActivity	itemActivityStat itemAnalytics list listItem listItemVersion permission sharedDriveItem site thumbnailSet

Identity and access reports service limits

Request type	Limit per app for all tenants	Limit per app per tenant
Any	122 requests per 10 seconds	Five requests per 10 seconds
GET signInActivity	10 requests per minute	10 requests per minute

The preceding limits apply to the following resources:

applicationSignInDetailedSummary applicationSignInSummary auditLogRoot authenticationMethod azureADUserFeatureUsage credentialUsageSummary credentialUserRegistrationCount	credentialUserRegistrationDetails directoryAudit provisioningObjectSummary relyingPartyDetailedSummary signIn userCredentialUsageDetails signInActivity userCredentialUsageDetails

Identity and access reports best practices

Microsoft Entra reporting APIs are throttled when Microsoft Entra ID receives too many calls during a given timeframe from a tenant or app. Calls might also be throttled if the service takes too long to respond. If your requests still fail with a 429 Too Many Requests error code despite applying the best practices to handle throttling, try reducing the amount of data returned. Try these approaches first:

• Use filters to target your query to just the data you need. If you only need a certain type of event or a subset of users, for example, filter out other events using the $filter and $select query parameters to reduce the size of your response object and the risk of throttling.
• If you need a broad set of Microsoft Entra ID reporting data, use $filter on the createdDateTime to limit the number of sign-in events you query in a single call. Then, iterate through the next timespan until you have all the records you need. For example, if you're being throttled, you can begin with a call that requests three days of data and iterate with shorter timespans until your requests are no longer throttled.
• The $select=signInActivity parameter on the List users operation may cause stricter throttling than standard Microsoft Graph API calls. To avoid these limits, only use this parameter when necessary. If you need sign-in activity data, use $top=500 to get the maximum 500 users per page instead of the default 100. This reduces the total number of API calls required.

Identity and access service limits

Pattern

Throttling is based on a token bucket algorithm, which works by adding individual costs of requests. The sum of request costs is then compared against predetermined limits. Only the requests exceeding the limits are throttled. If any of the limits are exceeded, the response is 429 Too Many Requests. It's possible to receive 429 Too Many Requests responses even when the following limits aren't reached, in situations when the services are under an important load or based on data volume for a specific tenant. The following table lists existing limits.

Limit type	Resource unit quota	Write quota
application+tenant pair	S: 3,500 ResourceUnits per 10 seconds M: 5,000 ResourceUnits per 10 seconds L: 8,000 ResourceUnits per 10 seconds	3,000 requests per 2 minutes and 30 seconds
application	150,000 ResourceUnits per 20 seconds	35,000 requests per 5 minutes
tenant	Not Applicable	18,000 requests per 5 minutes

Note

The application + tenant pair limit varies based on the number of users in the tenant requests are run against. The tenant sizes are defined as follows: S - under 50 users, M - between 50 and 500 users, and L - above 500 users.

---

The preceding limits apply to the following resources:

application contract device directoryObjectPartnerReference directoryObject directoryRoleTemplate directoryRole domainDnsCnameRecord domainDnsMxRecord domainDnsRecord domainDnsSrvRecord domainDnsTxtRecord domainDnsUnavailableRecord domain endpoint extensionProperty	groupSettingTemplate groupSetting group homeRealmDiscoveryPolicy licenseDetails oauth2PermissionGrant organization orgContact policyBase servicePrincipal stsPolicy subscribedSku tokenIssuancePolicy tokenLifetimePolicy user

---

The following table lists base request costs. Any requests not listed have a base cost of 1.

Operation	Request Path	Base Resource Unit Cost	Write Cost
GET	applications	2	0
GET	applications/{id}/extensionProperties	2	0
GET	contracts	3	0
POST	directoryObjects/getByIds	5	0
GET	domains/{id}/domainNameReferences	4	0
POST	getObjectsById	5	0
GET	groups/{id}/members	3	0
GET	groups/{id}/transitiveMembers	5	0
POST	isMemberOf	4	0
POST	me/checkMemberGroups	4	0
POST	me/checkMemberObjects	4	0
POST	me/getMemberGroups	2	0
POST	me/getMemberObjects	2	0
GET	me/licenseDetails	2	0
GET	me/memberOf	2	0
GET	me/ownedObjects	2	0
GET	me/transitiveMemberOf	2	0
GET	oauth2PermissionGrants	2	0
GET	oauth2PermissionGrants/{id}	2	0
GET	servicePrincipals/{id}/appRoleAssignments	2	0
GET	subscribedSkus	3	0
GET	users	2	0
GET	Any identity path not listed in the table	1	0
POST	Any identity path not listed in the table	1	1
PATCH	Any identity path not listed in the table	1	1
PUT	Any identity path not listed in the table	1	1
DELETE	Any identity path not listed in the table	1	1

Important

The cost of POST, PATCH, and DELETE operations on the applications request path depends on the signInAudience type. For apps where the signInAudience is AzureADMyOrg or AzureADMultipleOrgs, the cost is 70,000 requests per 5 minutes; while for apps where the signInAudience is AzureADandPersonalMicrosoftAccount or PersonalMicrosoftAccount, the cost is 60 requests per minute.

Other factors that affect a request cost:

• Using $select decreases cost by 1
• Using $expand increases cost by 1
• Using $top with a value of less than 20 decreases cost by 1
• Creating a user in a Microsoft Entra ID B2C tenant increases cost by 4

Note

• A request cost can never be lower than 1. Any request cost that applies to a request path starting with me/ also applies to equivalent requests starting with users/{id | userPrincipalName}/.
• Using $select for directoryObjects/getByIds and getObjectsById results in 2 ResourceUnits.

Other headers

Request headers

• x-ms-throttle-priority - If the header doesn't exist or is set to any other value, it indicates a normal request. We recommend setting priority to high only for the requests initiated by the user. This header can have one of the following values:
  • Low - Indicates the request is low priority. Throttling this request doesn't cause user-visible failures.
  • Normal - Default if no value is provided. Indicates that the request is default priority.
  • High - Indicates that the request is high priority. Throttling this request causes user-visible failures.

Note

Should requests be throttled, low priority requests are throttled first, normal priority requests second, and high priority requests last. Using the priority request header doesn't change the limits.

Regular responses requests

• x-ms-resource-unit - Indicates the resource unit used for this request. Values are positive integers.
• x-ms-throttle-limit-percentage - Returned only when the application consumed more than 0.8 of its limit. The value ranges from 0.8 to 1.8 and is a percentage of the use of the limit. Callers can use this value to set up an alert and take action.
  • 0.8 indicates you're using 80% of the granted limit.
  • 1.0 indicates you're using 100 % of the granted limit. You start to see throttling.
  • 1.2 indicates 20% of the incoming requests are throttled.
  • 1.8 indicates 80% of the incoming requests are throttled.

Throttled responses requests

• x-ms-throttle-scope - for example, Tenant_Application/ReadWrite/9a3d526c-b3c1-4479-ba74-197b5c5751ae/0785ef7c-2d7a-4542-b048-95bcab406e0b. Indicates the scope of throttling with the following format <Scope>/<Limit>/<ApplicationId>/<TenantId|UserId|ResourceId>:
  • Scope: (string, required)
    • Tenant_Application - All requests for a particular tenant for the current application.
    • Tenant - All requests for the current tenant, regardless of the application.
    • Application - All requests for the current application.
  • Limit: (string, required)
    • Read: Read requests for the scope (GET)
    • Write: Write requests for the scope (POST, PATCH, PUT, DELETE...)
    • ReadWrite: All Requests for the scope (any)
  • ApplicationId (Guid, required)
  • TenantId|UserId|ResourceId: (Guid, required)
• x-ms-throttle-information - Indicates the reason for throttling and can have any value (string). The value is provided for diagnostics and troubleshooting purposes, some examples include:
  • CPULimitExceeded - Throttling is because the limit for cpu allocation is exceeded.
  • WriteLimitExceeded - Throttling is because the write limit is exceeded.
  • ResourceUnitLimitExceeded - Throttling is because the limit for the allocated resource unit is exceeded.

Identity and access data policy operation service limits

Request type	Limit per tenant
POST on exportPersonalData	1,000 requests per day for any subject and 100 per subject per day
Any other request	10,000 requests per hour

The preceding limits apply to the following resources:

• dataPolicyOperation

Note

The resources listed earlier don't return a Retry-After header on 429 Too Many Requests responses.

Identity and access device operation service limits

Request type	Limit per app per tenant	Limit per user per tenant
POST, PATCH, DELETE	3,000 requests per 2 minutes and 30 seconds	25 requests per 10 seconds

The preceding limits apply to write quota for the device resource.

Identity protection and conditional access service limits

Request type	Limit per tenant for all apps
Any	One request per second

riskDetection riskyUser riskyUserHistoryItem namedLocation countryNamedLocation ipNamedLocation conditionalAccessPolicy

Note

The resources listed earlier don't return a Retry-After header on 429 Too Many Requests responses.

Identity providers service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
Any	300 requests per 1 minute	200 requests per 1 minute

The preceding limits apply to the following resources:

assignmentOrder authenticationEventListener authenticationFlowsPolicy b2cAuthenticationMethodsPolicy b2cIdentityUserFlow b2xIdentityUserFlow builtInIdentityProvider customAuthenticationExtension identityApiConnector identityBuiltInUserFlowAttribute identityCustomUserFlowAttribute identityProvider identityUserFlow	identityUserFlowAttribute identityUserFlowAttributeAssignment openIdConnectIdentityProvider openIdConnectProvider socialIdentityProvider trustFrameworkKeySet trustFrameworkPolicy userFlowLanguageConfiguration userFlowLanguagePage

Industry data ETL service limits

The industry data service limits on-demand runs to a maximum of five successful starts every 12 hours.

Information protection service limits

The following limits apply to any request on /informationProtection.

For email, the resource is a unique network message ID/recipient pair. For example, submitting an email with the same message ID sent to the same person multiple times in a 15-minute period triggers the limit per resource limits listed in the following table. However, you can submit up to 150 unique emails every 15 minutes (tenant limit).

Operation	Limit per tenant	Limit per resource (email, URL, file)
POST	150 requests per 15 minutes and 10,000 requests per 24 hours	One request per 15 minutes and 3 requests per 24 hours

threatAssessmentRequest threatAssessmentResult mailAssessmentRequest emailFileAssessmentRequest fileAssessmentRequest urlAssessmentRequest

Insights service limits

The following limits apply to any request on me/insights or users/{id}/insights.

Limit	Applies to
10,000 API requests in a 10-minute period	v1.0 and beta endpoints
Four concurrent requests	v1.0 and beta endpoints

The preceding limits apply to the following resources:

• people
• sharedInsight
• trending
• usedInsight

Intune service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

microsoftTunnelConfiguration microsoftTunnelHealthThreshold microsoftTunnelServer microsoftTunnelServerLogCollectionResponse microsoftTunnelSite

Intune android for work service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

androidDeviceOwnerEnrollmentProfile androidForWorkAppConfigurationSchema androidForWorkEnrollmentProfile androidForWorkSettings androidManagedStoreAccountEnterpriseSettings androidManagedStoreAppConfigurationSchema

Intune applications service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

androidForWorkApp androidForWorkMobileAppConfiguration androidLobApp androidManagedStoreApp androidManagedStoreAppConfiguration androidManagedStoreWebApp androidStoreApp enterpriseCodeSigningCertificate iosLobApp iosLobAppProvisioningConfiguration iosLobAppProvisioningConfigurationAssignment iosMobileAppConfiguration iosStoreApp iosVppApp iosVppAppAssignedDeviceLicense iosVppAppAssignedLicense iosVppAppAssignedUserLicense macOSLobApp macOSMdatpApp macOSMicrosoftEdgeApp macOSOfficeSuiteApp macOsVppApp macOsVppAppAssignedLicense managedAndroidLobApp managedAndroidStoreApp managedApp managedDeviceMobileAppConfiguration managedDeviceMobileAppConfigurationAssignment managedDeviceMobileAppConfigurationDeviceStatus managedDeviceMobileAppConfigurationDeviceSummary managedDeviceMobileAppConfigurationUserStatus managedDeviceMobileAppConfigurationUserSummary managedIOSLobApp

managedIOSStoreApp managedMobileLobApp microsoftStoreForBusinessApp microsoftStoreForBusinessContainedApp mobileApp mobileAppAssignment mobileAppCategory mobileAppContent mobileAppContentFile mobileAppDependency mobileAppInstallStatus mobileAppInstallSummary mobileAppProvisioningConfigGroupAssignment mobileAppRelationship mobileAppSupersedence mobileContainedApp mobileLobApp officeSuiteApp symantecCodeSigningCertificate userAppInstallStatus webApp win32LobApp windowsAppX windowsMicrosoftEdgeApp windowsMobileMSI windowsPhone81AppX windowsPhone81AppXBundle windowsPhone81StoreApp windowsPhoneXAP windowsStoreApp windowsUniversalAppX windowsUniversalAppXContainedApp

Intune auditing service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

auditEvent

Intune books service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

deviceInstallState eBookInstallSummary iosVppEBook iosVppEBookAssignment managedEBook managedEBookAssignment managedEBookCategory userInstallStateSummary

Intune bundles service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

assignmentFilterEvaluationStatusDetails deviceAndAppManagementAssignmentFilter deviceCompliancePolicyPolicySetItem deviceConfigurationPolicySetItem deviceManagementConfigurationPolicyPolicySetItem deviceManagementScriptPolicySetItem enrollmentRestrictionsConfigurationPolicySetItem iosLobAppProvisioningConfigurationPolicySetItem, managedAppProtectionPolicySetItem	managedDeviceMobileAppConfigurationPolicySetItem mdmWindowsInformationProtectionPolicyPolicySetItem mobileAppPolicySetItem policySet policySetAssignment policySetItem targetedManagedAppConfigurationPolicySetItem windows10EnrollmentCompletionPageConfigurationPolicySetItem windowsAutopilotDeploymentProfilePolicySetItem

Intune chromebook sync service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

chromeOSOnboardingSettings

Intune company terms service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

termsAndConditions termsAndConditionsAcceptanceStatus termsAndConditionsAssignment termsAndConditionsGroupAssignment

Intune device config v2 service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

deviceManagementConfigurationCategory deviceManagementConfigurationChoiceSettingCollectionDefinition deviceManagementConfigurationChoiceSettingDefinition deviceManagementConfigurationPolicy deviceManagementConfigurationPolicyAssignment deviceManagementConfigurationPolicyTemplate deviceManagementConfigurationSetting	deviceManagementConfigurationSettingDefinition deviceManagementConfigurationSettingGroupCollectionDefinition deviceManagementConfigurationSettingGroupDefinition deviceManagementConfigurationSettingTemplate deviceManagementConfigurationSimpleSettingCollectionDefinition deviceManagementConfigurationSimpleSettingDefinition deviceManagementReusablePolicySetting

Intune device configuration service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

advancedThreatProtectionOnboardingDeviceSettingState advancedThreatProtectionOnboardingStateSummary androidCertificateProfileBase androidCompliancePolicy androidCustomConfiguration androidDeviceComplianceLocalActionBase androidDeviceComplianceLocalActionLockDevice androidDeviceComplianceLocalActionLockDeviceWithPasscode androidDeviceOwnerCertificateProfileBase androidDeviceOwnerCompliancePolicy androidDeviceOwnerDerivedCredentialAuthenticationConfiguration androidDeviceOwnerEnterpriseWiFiConfiguration androidDeviceOwnerGeneralDeviceConfiguration androidDeviceOwnerImportedPFXCertificateProfile androidDeviceOwnerPkcsCertificateProfile androidDeviceOwnerScepCertificateProfile androidDeviceOwnerTrustedRootCertificate androidDeviceOwnerVpnConfiguration androidDeviceOwnerWiFiConfiguration androidEasEmailProfileConfiguration androidEnterpriseWiFiConfiguration androidForWorkCertificateProfileBase androidForWorkCompliancePolicy androidForWorkCustomConfiguration androidForWorkEasEmailProfileBase androidForWorkEnterpriseWiFiConfiguration androidForWorkGeneralDeviceConfiguration androidForWorkGmailEasConfiguration androidForWorkImportedPFXCertificateProfile androidForWorkNineWorkEasConfiguration androidForWorkPkcsCertificateProfile androidForWorkScepCertificateProfile androidForWorkTrustedRootCertificate androidForWorkVpnConfiguration androidForWorkWiFiConfiguration androidGeneralDeviceConfiguration androidImportedPFXCertificateProfile androidOmaCpConfiguration androidPkcsCertificateProfile androidScepCertificateProfile androidTrustedRootCertificate androidVpnConfiguration androidWiFiConfiguration androidWorkProfileCertificateProfileBase androidWorkProfileCompliancePolicy androidWorkProfileCustomConfiguration androidWorkProfileEasEmailProfileBase androidWorkProfileEnterpriseWiFiConfiguration androidWorkProfileGeneralDeviceConfiguration androidWorkProfileGmailEasConfiguration androidWorkProfileNineWorkEasConfiguration androidWorkProfilePkcsCertificateProfile androidWorkProfileScepCertificateProfile androidWorkProfileTrustedRootCertificate androidWorkProfileVpnConfiguration androidWorkProfileWiFiConfiguration aospDeviceOwnerCompliancePolicy aospDeviceOwnerDeviceConfiguration appleDeviceFeaturesConfigurationBase appleExpeditedCheckinConfigurationBase appleVpnConfiguration cartToClassAssociation defaultDeviceCompliancePolicy deviceComplianceActionItem deviceComplianceDeviceOverview deviceComplianceDeviceStatus deviceCompliancePolicy deviceCompliancePolicyAssignment deviceCompliancePolicyDeviceStateSummary deviceCompliancePolicyGroupAssignment deviceCompliancePolicySettingStateSummary deviceCompliancePolicyState deviceComplianceScheduledActionForRule deviceComplianceSettingState deviceComplianceUserOverview deviceComplianceUserStatus deviceConfiguration deviceConfigurationAssignment deviceConfigurationConflictSummary deviceConfigurationDeviceOverview deviceConfigurationDeviceStateSummary deviceConfigurationDeviceStatus deviceConfigurationGroupAssignment deviceConfigurationState deviceConfigurationUserOverview deviceConfigurationUserStateSummary deviceConfigurationUserStatus deviceManagement deviceSetupConfiguration easEmailProfileConfigurationBase editionUpgradeConfiguration iosCertificateProfile iosCertificateProfileBase iosCompliancePolicy iosCustomConfiguration

iosDerivedCredentialAuthenticationConfiguration iosDeviceFeaturesConfiguration iosEasEmailProfileConfiguration iosEducationDeviceConfiguration iosEduDeviceConfiguration iosEnterpriseWiFiConfiguration iosExpeditedCheckinConfiguration iosGeneralDeviceConfiguration iosikEv2VpnConfiguration iosImportedPFXCertificateProfile iosPkcsCertificateProfile iosScepCertificateProfile iosTrustedRootCertificate iosUpdateConfiguration iosUpdateDeviceStatus iosVpnConfiguration iosWiFiConfiguration macOSCertificateProfileBase macOSCompliancePolicy macOSCustomAppConfiguration macOSCustomConfiguration macOSDeviceFeaturesConfiguration macOSEndpointProtectionConfiguration macOSEnterpriseWiFiConfiguration macOSExtensionsConfiguration macOSGeneralDeviceConfiguration macOSImportedPFXCertificateProfile macOSPkcsCertificateProfile macOSScepCertificateProfile macOSSoftwareUpdateAccountSummary macOSSoftwareUpdateCategorySummary macOSSoftwareUpdateConfiguration macOSSoftwareUpdateStateSummary macOSTrustedRootCertificate macOSVpnConfiguration macOSWiFiConfiguration macOSWiredNetworkConfiguration managedAllDeviceCertificateState managedDeviceCertificateState managedDeviceEncryptionState managedDeviceMobileAppConfigurationState ndesConnector restrictedAppsViolation settingStateDeviceSummary sharedPCConfiguration softwareUpdateStatusSummary unsupportedDeviceConfiguration vpnConfiguration windows10CertificateProfileBase windows10CompliancePolicy windows10CustomConfiguration windows10DeviceFirmwareConfigurationInterface windows10EasEmailProfileConfiguration windows10EndpointProtectionConfiguration windows10EnterpriseModernAppManagementConfiguration windows10GeneralConfiguration windows10ImportedPFXCertificateProfile windows10MobileCompliancePolicy windows10NetworkBoundaryConfiguration windows10PFXImportCertificateProfile windows10PkcsCertificateProfile windows10SecureAssessmentConfiguration windows10TeamGeneralConfiguration windows10VpnConfiguration windows81CertificateProfileBase windows81CompliancePolicy windows81GeneralConfiguration windows81SCEPCertificateProfile windows81TrustedRootCertificate windows81VpnConfiguration windows81WifiImportConfiguration windowsAssignedAccessProfile windowsCertificateProfileBase windowsDefenderAdvancedThreatProtectionConfiguration windowsDeliveryOptimizationConfiguration windowsDomainJoinConfiguration windowsHealthMonitoringConfiguration windowsIdentityProtectionConfiguration windowsKioskConfiguration windowsPhone81CertificateProfileBase windowsPhone81CompliancePolicy windowsPhone81CustomConfiguration windowsPhone81GeneralConfiguration windowsPhone81ImportedPFXCertificateProfile windowsPhone81SCEPCertificateProfile windowsPhone81TrustedRootCertificate windowsPhone81VpnConfiguration windowsPhoneEASEmailProfileConfiguration windowsPrivacyDataAccessControlItem windowsUpdateForBusinessConfiguration windowsUpdateState windowsVpnConfiguration windowsWifiConfiguration windowsWifiEnterpriseEAPConfiguration

Intune device enrollment service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

complianceManagementPartner deviceAppManagement deviceCategory deviceComanagementAuthorityConfiguration deviceEnrollmentConfiguration deviceEnrollmentLimitConfiguration deviceEnrollmentPlatformRestrictionsConfiguration deviceEnrollmentWindowsHelloForBusinessConfiguration deviceManagementExchangeConnector	deviceManagementExchangeOnPremisesPolicy deviceManagementPartner enrollmentConfigurationAssignment mobileThreatDefenseConnector onPremisesConditionalAccessSettings sideLoadingKey vppToken windows10EnrollmentCompletionPageConfiguration

Intune device intent service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

deviceManagementAbstractComplexSettingDefinition deviceManagementAbstractComplexSettingInstance deviceManagementBooleanSettingInstance deviceManagementCollectionSettingDefinition deviceManagementCollectionSettingInstance deviceManagementComplexSettingDefinition deviceManagementComplexSettingInstance deviceManagementIntegerSettingInstance deviceManagementIntent deviceManagementIntentAssignment deviceManagementIntentDeviceSettingStateSummary deviceManagementIntentDeviceState deviceManagementIntentDeviceStateSummary deviceManagementIntentSettingCategory

deviceManagementIntentUserState deviceManagementIntentUserStateSummary deviceManagementSettingCategory deviceManagementSettingDefinition deviceManagementSettingInstance deviceManagementStringSettingInstance deviceManagementTemplate deviceManagementTemplateSettingCategory securityBaselineCategoryStateSummary securityBaselineDeviceState securityBaselineSettingState securityBaselineState securityBaselineStateSummary securityBaselineTemplate

Intune devices service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	400 requests per 20 seconds	200 requests per 20 seconds
Any	4000 requests per 20 seconds	2000 requests per 20 seconds

The preceding limits apply to the following resources:

applePushNotificationCertificate appLogCollectionRequest cloudPCConnectivityIssue comanagementEligibleDevice dataSharingConsent detectedApp deviceComplianceScript deviceComplianceScriptDeviceState deviceComplianceScriptRunSummary deviceCustomAttributeShellScript deviceHealthScript deviceHealthScriptAssignment deviceHealthScriptDeviceState deviceHealthScriptRunSummary deviceLogCollectionResponse deviceManagementScript deviceManagementScriptAssignment deviceManagementScriptDeviceState deviceManagementScriptGroupAssignment deviceManagementScriptRunSummary deviceManagementScriptUserState deviceShellScript malwareStateForWindowsDevice managedDevice managedDeviceOverview remoteActionAudit userExperienceAnalyticsAppHealthApplicationPerformance userExperienceAnalyticsAppHealthAppPerformanceByAppVersion userExperienceAnalyticsAppHealthAppPerformanceByOSVersion userExperienceAnalyticsAppHealthDeviceModelPerformance

userExperienceAnalyticsAppHealthDevicePerformance userExperienceAnalyticsAppHealthDevicePerformanceDetails userExperienceAnalyticsAppHealthOSVersionPerformance userExperienceAnalyticsBaseline userExperienceAnalyticsCategory userExperienceAnalyticsDevicePerformance userExperienceAnalyticsDeviceScores userExperienceAnalyticsDeviceStartupHistory userExperienceAnalyticsDeviceStartupProcess userExperienceAnalyticsDeviceStartupProcessPerformance userExperienceAnalyticsDeviceWithoutCloudIdentity userExperienceAnalyticsImpactingProcess userExperienceAnalyticsMetric userExperienceAnalyticsMetricHistory userExperienceAnalyticsNotAutopilotReadyDevice userExperienceAnalyticsOverview userExperienceAnalyticsRegressionSummary userExperienceAnalyticsRemoteConnection userExperienceAnalyticsResourcePerformance userExperienceAnalyticsScoreHistory userExperienceAnalyticsWorkFromAnywhereDevice userExperienceAnalyticsWorkFromAnywhereMetric windowsDeviceMalwareState windowsMalwareInformation windowsManagedDevice windowsManagementApp windowsManagementAppHealthState windowsManagementAppHealthSummary windowsProtectionState

Intune endpoint protection service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

deviceManagementDerivedCredentialSettings deviceManagementResourceAccessProfileAssignment deviceManagementResourceAccessProfileBase windows10XCertificateProfile windows10XSCEPCertificateProfile windows10XTrustedRootCertificate windows10XVpnConfiguration windows10XWifiConfiguration

Intune enrollment service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

complianceManagementPartner deviceAppManagement deviceCategory deviceComanagementAuthorityConfiguration deviceEnrollmentConfiguration deviceEnrollmentLimitConfiguration deviceEnrollmentPlatformRestrictionsConfiguration deviceEnrollmentWindowsHelloForBusinessConfiguration deviceManagementExchangeConnector	deviceManagementExchangeOnPremisesPolicy deviceManagementPartner enrollmentConfigurationAssignment mobileThreatDefenseConnector onPremisesConditionalAccessSettings sideLoadingKey vppToken windows10EnrollmentCompletionPageConfiguration

Intune GPAnalytics service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

groupPolicyMigrationReport groupPolicyObjectFile groupPolicySettingMapping unsupportedGroupPolicyExtension

Intune managed applications service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

androidManagedAppProtection androidManagedAppRegistration defaultManagedAppProtection iosManagedAppProtection iosManagedAppRegistration managedAppConfiguration managedAppOperation managedAppPolicy managedAppPolicyDeploymentSummary managedAppProtection managedAppRegistration managedAppStatus	managedAppStatusRaw managedMobileApp mdmWindowsInformationProtectionPolicy targetedManagedAppConfiguration targetedManagedAppPolicyAssignment targetedManagedAppProtection windowsInformationProtection windowsInformationProtectionAppLockerFile windowsInformationProtectionDeviceRegistration windowsInformationProtectionPolicy windowsInformationProtectionWipeAction

Intune notifications service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

localizedNotificationMessage notificationMessageTemplate

Intune ODJ service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

deviceManagementDomainJoinConnector

Intune partner integration service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

appVulnerabilityManagedDevice appVulnerabilityMobileApp appVulnerabilityTask configManagerCollection deviceAppManagementTask securityConfigurationTask unmanagedDeviceDiscoveryTask vulnerableManagedDevice

Intune rbac service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

deviceAndAppManagementRoleAssignment deviceAndAppManagementRoleDefinition resourceOperation roleAssignment roleDefinition roleScopeTag roleScopeTagAutoAssignment

Intune remote assistance service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

remoteAssistancePartner remoteAssistanceSettings

Intune telephony service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

embeddedSIMActivationCodePool embeddedSIMActivationCodePoolAssignment embeddedSIMDeviceState

Intune TEM service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

telecomExpenseManagementPartner

Intune troubleshooting service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

appleVppTokenTroubleshootingEvent deviceManagementAutopilotEvent deviceManagementAutopilotPolicyStatusDetail deviceManagementTroubleshootingEvent enrollmentTroubleshootingEvent mobileAppIntentAndState mobileAppTroubleshootingEvent

Intune unlock service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

windowsDefenderApplicationControlSupplementalPolicy windowsDefenderApplicationControlSupplementalPolicyAssignment windowsDefenderApplicationControlSupplementalPolicyDeploymentStatus windowsDefenderApplicationControlSupplementalPolicyDeploymentSummary

Intune updates service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

windowsFeatureUpdateCatalogItem windowsFeatureUpdateProfile windowsFeatureUpdateProfileAssignment windowsQualityUpdateCatalogItem windowsQualityUpdateProfile windowsQualityUpdateProfileAssignment windowsUpdateCatalogItem

Intune wip service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

intuneBrandingProfile intuneBrandingProfileAssignment windowsInformationProtectionAppLearningSummary windowsInformationProtectionNetworkLearningSummary

Invitation manager service limits

The following limits apply to any request on /invitations.

Operation	Limit per tenant for all apps
Any operation	150 requests per 5 seconds

Microsoft 365 reports service limits

The following limits apply to any request on /reports.

Operation	Limit per app per tenant	Limit per tenant for all apps
Any request (CSV)	14 requests per 10 minutes	40 requests per 10 minutes
Any request (JSON, beta)	100 requests per 10 minutes	n/a

The preceding limits apply individually to each report API. For example, a request to the Microsoft Teams user activity report API and a request to the Outlook user activity report API within 10 minutes count as one request out of 14 for each API, not two requests out of 14 for both.

The preceding limits apply to all usage reports resources.

Microsoft Teams service limits

Microsoft Teams applies throttling limits across four independent dimensions. A request is throttled when it exceeds any limit that applies to it, so always design for the lowest limit that your scenario hits.

Dimension	What it counts	When it typically applies
Per app	All requests from one app (client ID) summed across every tenant.	Multitenant apps that serve many customers.
Per app per tenant	Requests from one app within a single tenant.	The most commonly reached limit.
Per resource	Requests against a single team, channel, or chat.	Apps that concentrate traffic on one conversation.
Per user	Requests made on behalf of a single user.	Delegated (user) permission scenarios.

Limits are expressed as requests per second (rps) unless stated otherwise.

Each limit is evaluated over a short burst window. A sustained limit of approximately 83 percent of the listed value is also evaluated over a longer window, so a workload that runs continuously at the listed rate can still be throttled. Size your steady-state traffic below the listed limit and use exponential backoff.

A dash (-) means that no dedicated limit is defined for that dimension. The request is still subject to the default limits and to any other limit in the same row.

Teams

Request	Per app	Per app per tenant	Per resource	Per user
GET /teams/{team-id}	1500 rps	30 rps	4 rps per team	-
GET /me/joinedTeams or /users/{user-id}/joinedTeams	300 rps	30 rps	-	-
POST /teams	100 rps	10 rps	-	-
PUT /groups/{team-id}/team	150 rps	6 rps	-	-
PATCH /teams/{team-id}	300 rps	30 rps	4 rps per team	-
POST /teams/{team-id}/clone	150 rps	6 rps	-	-
POST /teams/{team-id}/completeMigration	100 rps	10 rps	-	-

Channels

Request	Per app	Per app per tenant	Per resource	Per user
GET /teams/{team-id}/channels	1200 rps	60 rps	4 rps per team	-
GET /teams/{team-id}/channels/{channel-id}	600 rps	30 rps	1 rps per channel	-
GET /teams/{team-id}/channels/{channel-id}/members	1200 rps	60 rps	1 rps per channel	-
POST /teams/{team-id}/channels	100 rps	10 rps	4 rps per team	-
PATCH /teams/{team-id}/channels/{channel-id}	300 rps	30 rps	1 rps per channel	-
DELETE /teams/{team-id}/channels/{channel-id}	150 rps	15 rps	1 rps per channel	-
POST /teams/{team-id}/channels/{channel-id}/completeMigration	100 rps	10 rps	-	-

Channel messages

Request	Per app	Per app per tenant	Per resource	Per user
GET /teams/{team-id}/channels/{channel-id}/messages	200 rps	20 rps	1 rps per channel	-
POST /teams/{team-id}/channels/{channel-id}/messages	500 rps	50 rps	1 rps per channel	1 rps
POST /teams/{team-id}/channels/{channel-id}/messages/{message-id}/replies	500 rps	50 rps	1 rps per channel	1 rps

The POST limits in the preceding table are shared by regular message sends and by message import. The per-user limit doesn't apply to import.

Chats

Request	Per app	Per app per tenant	Per resource	Per user
GET /chats, /me/chats, or /users/{user-id}/chats	200 rps	20 rps	-	1 rps
GET /chats/{chat-id}	2000 rps	200 rps	1 rps per chat	5 rps
POST /chats	200 rps	20 rps	-	-
PATCH /chats/{chat-id}	300 rps	30 rps	1 rps per chat	-
DELETE /chats/{chat-id}	10 rps	1 rps	1 rps per chat	-
POST /chats/{chat-id}/removeAllAccessForUser	300 rps	30 rps	1 rps per chat	1 rps

Chat messages

Request	Per app	Per app per tenant	Per resource	Per user
GET /chats/{chat-id}/messages	200 rps	20 rps	1 rps per chat	-
POST /chats/{chat-id}/messages	200 rps	20 rps	1 rps per chat	1 rps
PATCH /chats/{chat-id}/messages/{message-id}	300 rps	30 rps	1 rps per chat	-
POST /chats/{chat-id}/messages/{message-id}/softDelete or undoSoftDelete	300 rps	30 rps	1 rps per chat	-
GET /chats/{chat-id}/messages/{message-id}/hostedContents	500 rps	50 rps	1 rps per chat	-
GET /chats/{chat-id}/messages/{message-id}/hostedContents/{id}/$value	600 rps	60 rps	1 rps per chat	-

Members

Request	Per app	Per app per tenant	Per resource	Per user
GET /teams/{team-id}/members	1200 rps	60 rps	4 rps per team	-
POST /teams/{team-id}/members	300 rps	30 rps	4 requests per minute per team	-
POST /teams/{team-id}/members/add	100 rps	10 rps	4 requests per minute per team	-
POST /chats/{chat-id}/members	300 rps	30 rps	4 requests per minute per chat	-
DELETE /chats/{chat-id}/members/{membership-id}	300 rps	30 rps	4 requests per minute per chat	-

Apps, tabs, and permission grants

Request	Per app	Per app per tenant	Per resource	Per user
GET installedApps for team, chat, or user	1500 rps	30 rps	1 rps per chat or channel	-
GET permissionGrants for team or chat	1500 rps	30 rps	1 rps per chat or channel	-
POST installedApps for team, chat, or user	300 rps	30 rps	1 rps per chat or channel	-
DELETE installedApps for team, chat, or user	150 rps	15 rps	1 rps per chat or channel	-
GET tabs for channel or chat	600 rps	30 rps	1 rps per chat or channel	-
POST tabs for channel or chat	300 rps	30 rps	1 rps per chat or channel	-
PATCH tab	300 rps	30 rps	1 rps per chat or channel	-
DELETE tabs for channel or chat	150 rps	15 rps	1 rps per chat or channel	-
GET /appCatalogs/teamsApps	1500 rps	30 rps	-	-
POST /appCatalogs/teamsApps	300 rps	30 rps	-	-
DELETE /appCatalogs/teamsApps/{app-id}	150 rps	15 rps	-	-

Activity feed notifications

Request	Per app	Per app per tenant	Per resource	Per user
POST /teams/{team-id}/sendActivityNotification	50 rps	5 rps	4 rps per team	-
POST /chats/{chat-id}/sendActivityNotification	50 rps	5 rps	1 rps per chat	-
POST /users/{user-id}/teamwork/sendActivityNotification	50 rps	5 rps	-	-
POST /teamwork/sendActivityNotificationToRecipients	20 rps	2 rps	-	-

Bulk message retrieval

These APIs are designed for export and compliance scenarios and have their own higher limits.

Request	Per app	Per app per tenant	Per resource	Per user
GET /teams/{team-id}/channels/getAllMessages or /channels/allMessages	1000 rps	200 rps	-	-
GET /users/{user-id}/chats/getAllMessages or /chats/allMessages	1000 rps	200 rps	-	-
GET /teams/{team-id}/channels/getAllRetainedMessages	1000 rps	200 rps	-	-
GET /users/{user-id}/chats/getAllRetainedMessages	1000 rps	200 rps	-	-
GET /copilot/users/{user-id}/interactionHistory/getAllEnterpriseInteractions	1500 rps	30 rps	-	-

Shifts

Request	Per app	Per app per tenant	Per resource	Per user
GET /teams/{team-id}/schedule and all APIs under this path	600 rps	30 rps	-	-
POST /teams/{team-id}/schedule and all APIs under this path	300 rps	30 rps	-	-
PUT /teams/{team-id}/schedule and all APIs under this path	300 rps	30 rps	-	-

Sections

Request	Per app	Per app per tenant	Per resource	Per user
All section management APIs under /users/{user-id}/teamwork/sections	-	5 rps	-	-

All section operations, including sections, section items, reorder actions, and delta queries, share a single limit.

Default limits

Any Microsoft Teams request that isn't listed in the preceding tables uses these limits.

Request type	Per app	Per app per tenant	Per resource	Per user
GET	1500 rps	30 rps	1 rps per chat or channel	1 rps
POST, PUT, and PATCH	300 rps	30 rps	1 rps per chat or channel	1 rps
DELETE	150 rps	15 rps	1 rps per chat or channel	1 rps

Related resources

See also Microsoft Teams limits and polling requirements.

The preceding limits apply to the following resources:

aadUserConversationMember changeTrackedEntity channel chatMessage chatMessageHostedContent conversationMember offerShiftRequest openShift openShiftChangeRequest schedule schedulingGroup shift shiftPreferences	swapShiftsChangeRequest team teamsApp teamsAppDefinition teamsAppInstallation teamsAsyncOperation teamsTab teamsTemplate teamwork teamworkSection teamworkSectionItem timeOff timeOffReason timeOffRequest userSettings workforceIntegration

Multitenant management service limits

Request type	Limit per tenant for all apps	Limit per app per tenant
POST, PUT, DELETE, PATCH	200 requests per 20 seconds	100 requests per 20 seconds
Any	2000 requests per 20 seconds	1000 requests per 20 seconds

The preceding limits apply to the following resources:

aggregatedPolicyCompliance cloudPcConnection cloudPcDevice cloudPcOverview conditionalAccessPolicyCoverage credentialUserRegistrationsSummary deviceCompliancePolicySettingStateSummary managedDeviceCompliance managedDeviceComplianceTrend managedTenant managementAction managementActionTenantDeploymentStatus	managementIntent managementTemplate riskyUser tenant tenantCustomizedInformation tenantDetailedInformation tenantGroup tenantRelationship tenantTag windowsDeviceMalwareState windowsProtectionState

OneNote service limits

Limit type	Limit per app per user (delegated context)	Limit per app (app-only context)
Requests rate	120 requests per 1 minute and 400 per 1 hour	240 requests per 1 minute and 800 per 1 hour
Concurrent requests	Five concurrent requests	20 concurrent requests

The preceding limits apply to the following resources:

notebook onenote onenoteOperation onenotePage onenoteResource onenoteSection sectionGroup

You can find additional information about best practices in OneNote API throttling and how to avoid it.

Note

The resources listed earlier don't return a Retry-After header on 429 Too Many Requests responses.

Open and schema extensions service limits

Request type	Limit per app per tenant
Any	455 requests per 10 seconds

The preceding limits apply to the following resources:

administrativeUnit contact device event group message	openTypeExtension organization post schemaExtension user

Outlook service limits

Outlook service limits apply to the public cloud and national cloud deployments.

Limits per mailbox

The Outlook service applies limits to each app ID and mailbox combination - that is, a specific app accessing a specific user or group mailbox. Exceeding the limit for one mailbox doesn't affect the ability of the application to access another mailbox.

Limit	Applies to
10,000 API requests in a 10-minute period	v1.0 and beta endpoints
Four concurrent requests	v1.0 and beta endpoints
150 megabytes (MB) upload (PATCH, POST, PUT) in a 5-minute period	v1.0 and beta endpoints

Outlook service resources

API	Resources
Search API (preview)	External item (Microsoft Search)
Profile API	Photo
Calendar API	event eventMessage calendar calendarGroup outlookCategory attachment place (preview)
Mail API	message mailFolder mailSearchFolder messageRule outlookCategory attachment
Mailbox import and export API	mailbox mailboxItem mailboxFolder exchangeSettings
Personal contacts API	contact contactFolder outlookCategory
Social and workplace intelligence	person
To-do tasks API (preview)	outlookTask outlookTaskFolder outlookTaskGroup outlookCategory attachment

Outlook service limits for JSON batching

When an app makes a JSON batch request that consists of multiple, unordered individual requests to the Outlook service, by default, Microsoft Graph sends the Outlook service up to four individual requests from the batch at a time, regardless of the target mailboxes of those requests. The Outlook service can execute these requests in parallel at any point, also irrespective of the target mailbox. Since Microsoft Graph sends only up to four requests to run in parallel, the execution of that batch stays within Outlook's concurrency limits for the same mailbox, regardless of the app used.

Alternatively, an app can use the dependsOn property to order requests within a batch. Microsoft Graph sends the Outlook service one request from the batch at a time following the specified order, and Outlook executes each individual request in the batch sequentially.

In other words, when targeting the same mailbox, apps that allow multiple batch requests to run in parallel can use either of the following approaches:

• If the individual requests don't have to be ordered, have individual requests from a single batch run concurrently.
• Use the dependsOn property to order requests in a batch, and have up to four such batch requests run concurrently.

Places service limits

The following Places APIs have a throttling limit of three calls per second:

• Get operation
• List operations
• Upsert places

Project Rome service limits

Request type	Limit per user for all apps
GET	400 requests per 5 minutes and 12,000 requests per one day
POST, PUT, PATCH, DELETE	100 requests per 5 minutes and 8,000 requests per one day

The preceding limits apply to the following resources:

• activityHistoryItem
• userActivity

Security detections and incidents service limits

The following limits apply to any request on /security.

Operation	Limit per app per tenant
Any operation on alert, securityActions, secureScore	150 requests per minute
Any operation on tiIndicator	1,000 requests per minute
Any operation on secureScore or secureScorecontrolProfile	10,000 API requests in a 10-minute period
Any operation on secureScore or secureScorecontrolProfile	Four concurrent requests

Security eDiscovery service limits

The following limits apply to any request on /security/eDiscoveryCases.

Operation	Limit per app per tenant
Any	Five requests per minute

Service Communications service limits

The following limits apply to any type of requests for service communications under /admin/serviceAnnouncement/.

Request type	Limit per app per tenant
Any	240 requests per 60 seconds
Any	800 requests per hour

Subscription service limits

Request type	Limit per app for all tenants	Limit per app per tenant
POST, PUT, DELETE, PATCH	2000 requests per 20 seconds	500 requests per 20 seconds
POST /reauthorize subscription by ID	4000 requests per 20 seconds	1000 requests per 20 seconds
GET Subscription by Id	2000 requests per 20 seconds	500 requests per 20 seconds
GET Subscription List	40 requests per 20 seconds	25 requests per 20 seconds

The preceding limits apply to the subscription resource.

Tasks and plans service limits

Service limits for Planner aren't available.

The preceding information applies to the following resources:

planner plannerAssignedToTaskBoardTaskFormat plannerBucket plannerBucketTaskBoardTaskFormat plannerGroup plannerPlan	plannerPlanDetails plannerProgressTaskBoardTaskFormat plannerTask plannerTaskDetails plannerUser

Viva Engage service limits

Viva Engage API calls are subject to rate limiting, allowing 10 requests per user, per app, within a 30-second time period. When you exceed the rate limit, all subsequent requests return a 429 Too Many Requests response code.

Windows 365 service limits

Request type	Limit per tenant for all apps or users	Limit per app or user per tenant
List Cloud PCs	180 requests per 60 seconds	162 requests per 60 seconds
Get Cloud PC	540 requests per 60 seconds	486 requests per 60 seconds

Starting September 30, 2025, the per-app/per-user per-tenant throttling limit will be reduced to half of the total per-tenant limit to prevent a single user or app from consuming all the quota within a tenant.

Request type	Limit per tenant for all apps or users	Limit per app or user per tenant
List Cloud PCs	180 requests per 60 seconds	90 requests per 60 seconds
Get Cloud PC	540 requests per 60 seconds	270 requests per 60 seconds

Related content

• Best practices for working with Microsoft Graph