Microsoft Graph service-specific throttling limits
Microsoft Graph allows you to access data in multiple services, such as Outlook or Microsoft Entra ID. These services impose their own throttling limits that affect applications that use Microsoft Graph to access them.
Any request can be evaluated against multiple limits, depending on the scope of the limit (per app across all tenants, per tenant for all apps, per app per tenant, and so on), the request type (GET, POST, PATCH, and so on), and other factors. The first limit to be reached triggers throttling behavior. In addition to the service specific-limits described in the section, the following global limits apply:
Request type | Per app across all tenants |
---|---|
Any | 130,000 requests per 10 seconds |
Note
The specific limits described here are subject to change.
In this section, the term tenant refers to the Microsoft 365 organization where the application is installed. This tenant can be the same as the one where the application was created in the case of a single-tenant application, or it can be different in the case of a multi-tenant application.
Assignment service limits
The following limits apply to requests on the assignment service API:
Request type | Limit per app per tenant | Limit per tenant for all apps |
---|---|---|
Any | 500 requests per 10 seconds | 1,000 requests per 10 seconds |
Any | 15,000 requests per 3,600 seconds | 30,000 requests per 3,600 seconds |
GET me/Assignment | 50 requests per 10 seconds | 150 requests per 10 seconds |
The preceding limits apply to the following resources:
Bookings service limits
The Bookings service applies limits to each app ID and mailbox combination, specifically when a particular app accesses a particular booking mailbox. Exceeding the limit for one mailbox doesn't affect the ability of the application to access another mailbox.
Limit | Applies to |
---|---|
Four concurrent requests | v1.0 and beta endpoints |
The preceding limits apply to the following resources:
Cloud communication service limits
Resource | Limits per app |
---|---|
Calls | 50,000 requests in a 15-second period, per application per tenant |
Meeting information | 2,000 meetings/user each month |
Presence | 1,500 requests in a 30-second period, per application per tenant |
Virtual event | 10,000 requests/app each month |
Call records limits
The limits listed in the following table apply to the following resources:
Limit type | Limit |
---|---|
Per application for all tenants | 15,000 requests per 20 seconds |
Per tenant for all applications | 10,000 requests per 20 seconds |
Per application per tenant | 1,500 requests per 20 seconds |
Per call record | 10 requests per 20 seconds (first page) 50 requests per 5 minutes (subsequent pages) |
List call records | 15 requests per 20 seconds (first page) 55 requests per 5 minutes (subsequent pages) |
PSTN call records limits
The limits listed in the following table apply to the following resources:
Limit type | Limit |
---|---|
Per tenant | 1,000 requests per 60 seconds |
Per application per tenant | 200 requests per 60 seconds |
Per collection | 50 requests per 60 seconds |
Excel service limits
For explanations and best practices related to Excel service throttling, see Reduce throttling errors. In addition, following are some throttling limits.
Request type | Limit per app for all tenants | Limit per app per tenant |
---|---|---|
Any | 5000 requests per 10 seconds | 1500 requests per 10 seconds |
The preceding limits apply to the following resources:
Education service limits
Request type | Limit per app for all tenants | Limit per app per tenant |
---|---|---|
Any | 400,000 requests per 20 seconds | 35,000 requests per 10 seconds |
The preceding limits apply to the following resources:
Files and lists service limits
For service limits for OneDrive, OneDrive for Business, and SharePoint Online, see Avoid getting throttled or blocked in SharePoint Online.
The preceding information applies to the following resources:
Identity and access reports service limits
Request type | Limit per app per tenant |
---|---|
Any | Five requests per 10 seconds |
The preceding limits apply to the following resources:
Identity and access reports best practices
Microsoft Entra reporting APIs are throttled when Microsoft Entra ID receives too many calls during a given timeframe from a tenant or app. Calls might also be throttled if the service takes too long to respond. If your requests still fail with a 429 Too Many Requests
error code despite applying the best practices to handle throttling, try reducing the amount of data returned. Try these approaches first:
- Use filters to target your query to just the data you need. If you only need a certain type of event or a subset of users, for example, filter out other events using the
$filter
and$select
query parameters to reduce the size of your response object and the risk of throttling. - If you need a broad set of Microsoft Entra ID reporting data, use
$filter
on the createdDateTime to limit the number of sign-in events you query in a single call. Then, iterate through the next timespan until you have all the records you need. For example, if you're being throttled, you can begin with a call that requests three days of data and iterate with shorter timespans until your requests are no longer throttled.
Identity and access service limits
Pattern
Throttling is based on a token bucket algorithm, which works by adding individual costs of requests. The sum of request costs is then compared against predetermined limits. Only the requests exceeding the limits are throttled. If any of the limits are exceeded, the response is 429 Too Many Requests
. It's possible to receive 429 Too Many Requests
responses even when the following limits aren't reached, in situations when the services are under an important load or based on data volume for a specific tenant. The following table lists existing limits.
Limit type | Resource unit quota | Write quota |
---|---|---|
application+tenant pair | S: 3,500 ResourceUnits per 10 seconds M: 5,000 ResourceUnits per 10 seconds L: 8,000 ResourceUnits per 10 seconds |
3,000 requests per 2 minutes and 30 seconds |
application | 150,000 ResourceUnits per 20 seconds | 35,000 requests per 5 minutes |
tenant | Not Applicable | 18,000 requests per 5 minutes |
Note
The application + tenant pair limit varies based on the number of users in the tenant requests are run against. The tenant sizes are defined as follows: S - under 50 users, M - between 50 and 500 users, and L - above 500 users.
The preceding limits apply to the following resources:
The following table lists base request costs. Any requests not listed have a base cost of 1.
Operation | Request Path | Base Resource Unit Cost | Write Cost |
---|---|---|---|
GET | applications |
2 | 0 |
GET | applications/{id}/extensionProperties |
2 | 0 |
GET | contracts |
3 | 0 |
POST | directoryObjects/getByIds |
5 | 0 |
GET | domains/{id}/domainNameReferences |
4 | 0 |
POST | getObjectsById |
5 | 0 |
GET | groups/{id}/members |
3 | 0 |
GET | groups/{id}/transitiveMembers |
5 | 0 |
POST | isMemberOf |
4 | 0 |
POST | me/checkMemberGroups |
4 | 0 |
POST | me/checkMemberObjects |
4 | 0 |
POST | me/getMemberGroups |
2 | 0 |
POST | me/getMemberObjects |
2 | 0 |
GET | me/licenseDetails |
2 | 0 |
GET | me/memberOf |
2 | 0 |
GET | me/ownedObjects |
2 | 0 |
GET | me/transitiveMemberOf |
2 | 0 |
GET | oauth2PermissionGrants |
2 | 0 |
GET | oauth2PermissionGrants/{id} |
2 | 0 |
GET | servicePrincipals/{id}/appRoleAssignments |
2 | 0 |
GET | subscribedSkus |
3 | 0 |
GET | users |
2 | 0 |
GET | Any identity path not listed in the table | 1 | 0 |
POST | Any identity path not listed in the table | 1 | 1 |
PATCH | Any identity path not listed in the table | 1 | 1 |
PUT | Any identity path not listed in the table | 1 | 1 |
DELETE | Any identity path not listed in the table | 1 | 1 |
Important
The cost of POST, PATCH, and DELETE operations on the applications
request path depends on the signInAudience type. For apps where the signInAudience is AzureADMyOrg
or AzureADMultipleOrgs
, the cost is 70,000 requests per 5 minutes; while for apps where the signInAudience is AzureADandPersonalMicrosoftAccount
or PersonalMicrosoftAccount
, the cost is 60 requests per minute.
Other factors that affect a request cost:
- Using
$select
decreases cost by 1 - Using
$expand
increases cost by 1 - Using
$top
with a value of less than 20 decreases cost by 1 - Creating a user in a Microsoft Entra ID B2C tenant increases cost by 4
Note
- A request cost can never be lower than 1. Any request cost that applies to a request path starting with
me/
also applies to equivalent requests starting withusers/{id | userPrincipalName}/
. - Using
$select
fordirectoryObjects/getByIds
andgetObjectsById
will result in 2 ResourceUnits.
Additional headers
Request headers
- x-ms-throttle-priority - If the header doesn't exist or is set to any other value, it indicates a normal request. We recommend setting priority to
high
only for the requests initiated by the user. This header can have one of the following values:- Low - Indicates the request is low priority. Throttling this request doesn't cause user-visible failures.
- Normal - Default if no value is provided. Indicates that the request is default priority.
- High - Indicates that the request is high priority. Throttling this request causes user-visible failures.
Note
Should requests be throttled, low priority requests will be throttled first, normal priority requests second, and high priority requests last. Using the priority request header does not change the limits.
Regular responses requests
- x-ms-resource-unit - Indicates the resource unit used for this request. Values are positive integers.
- x-ms-throttle-limit-percentage - Returned only when the application consumed more than 0.8 of its limit. The value ranges from 0.8 to 1.8 and is a percentage of the use of the limit. Callers can use this value to set up an alert and take action.
Throttled responses requests
- x-ms-throttle-scope - for example,
Tenant_Application/ReadWrite/9a3d526c-b3c1-4479-ba74-197b5c5751ae/0785ef7c-2d7a-4542-b048-95bcab406e0b
. Indicates the scope of throttling with the following format<Scope>/<Limit>/<ApplicationId>/<TenantId|UserId|ResourceId>
:- Scope: (string, required)
- Tenant_Application - All requests for a particular tenant for the current application.
- Tenant - All requests for the current tenant, regardless of the application.
- Application - All requests for the current application.
- Limit: (string, required)
- Read: Read requests for the scope (GET)
- Write: Write requests for the scope (POST, PATCH, PUT, DELETE...)
- ReadWrite: All Requests for the scope (any)
- ApplicationId (Guid, required)
- TenantId|UserId|ResourceId: (Guid, required)
- Scope: (string, required)
- x-ms-throttle-information - Indicates the reason for throttling and can have any value (string). The value is provided for diagnostics and troubleshooting purposes, some examples include:
- CPULimitExceeded - Throttling is because the limit for cpu allocation is exceeded.
- WriteLimitExceeded - Throttling is because the write limit is exceeded.
- ResourceUnitLimitExceeded - Throttling is because the limit for the allocated resource unit is exceeded.
Identity and access data policy operation service limits
Request type | Limit per tenant |
---|---|
POST on exportPersonalData |
1,000 requests per day for any subject and 100 per subject per day |
Any other request | 10,000 requests per hour |
The preceding limits apply to the following resources:
Note
The resources listed earlier do not return a Retry-After
header on 429 Too Many Requests
responses.
Identity protection and conditional access service limits
Request type | Limit per tenant for all apps |
---|---|
Any | One request per second |
Note
The resources listed earlier do not return a Retry-After
header on 429 Too Many Requests
responses.
Identity providers service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
Any | 300 requests per 1 minute | 200 requests per 1 minute |
The preceding limits apply to the following resources:
Information protection service limits
The following limits apply to any request on /informationProtection
.
For email, the resource is a unique network message ID/recipient pair. For example, submitting an email with the same message ID sent to the same person multiple times in a 15-minute period triggers the limit per resource limits listed in the following table. However, you can submit up to 150 unique emails every 15 minutes (tenant limit).
Operation | Limit per tenant | Limit per resource (email, URL, file) |
---|---|---|
POST | 150 requests per 15 minutes and 10,000 requests per 24 hours | One request per 15 minutes and 3 requests per 24 hours |
Insights service limits
The following limits apply to any request on me/insights
or users/{id}/insights
.
Limit | Applies to |
---|---|
10,000 API requests in a 10-minute period | v1.0 and beta endpoints |
Four concurrent requests | v1.0 and beta endpoints |
The preceding limits apply to the following resources:
Intune service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune android for work service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune applications service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune auditing service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune books service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune bundles service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune chromebook sync service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune company terms service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune device config v2 service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune device configuration service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune device enrollment service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune device intent service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune devices service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 400 requests per 20 seconds | 200 requests per 20 seconds |
Any | 4000 requests per 20 seconds | 2000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune endpoint protection service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune enrollment service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune GPAnalytics service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune managed applications service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune notifications service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune ODJ service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune partner integration service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune rbac service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune remote assistance service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune telephony service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune TEM service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune troubleshooting service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune unlock service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune updates service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Intune wip service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
Invitation manager service limits
The following limits apply to any request on /invitations
.
Operation | Limit per tenant for all apps |
---|---|
Any operation | 150 requests per 5 seconds |
Microsoft 365 reports service limits
The following limits apply to any request on /reports
.
Operation | Limit per app per tenant | Limit per tenant for all apps |
---|---|---|
Any request (CSV) | 14 requests per 10 minutes | 40 requests per 10 minutes |
Any request (JSON, beta) | 100 requests per 10 minutes | n/a |
The preceding limits apply individually to each report API. For example, a request to the Microsoft Teams user activity report API and a request to the Outlook user activity report API within 10 minutes count as one request out of 14 for each API, not two requests out of 14 for both.
The preceding limits apply to all usage reports resources.
Microsoft Teams service limits
Limits are expressed as requests per second (rps).
Teams request type | Limit per app per tenant | Limit per app across all tenants | Limit per app per tenant per resource(chat/channel) |
---|---|---|---|
GET team | 30 rps | 600 rps | |
GET channel | 30 rps | 600 rps | 1rps |
GET tab for channel, chat | 30 rps | 600 rps | 1rps |
GET installedApps for user, team | 30 rps | 600 rps | |
GET installedApps for chat | 30 rps | 600 rps | 1rps |
GET appCatalogs | 30 rps | 600 rps | |
POST channel | 30 rps | 300 rps | 1rps |
POST tab for channel or chat | 30 rps | 300 rps | 1rps |
POST installedApps for chat, user, team | 30 rps | 300 rps | |
POST appCatalogs | 30 rps | 300 rps | |
PATCH team, tab | 30 rps | 300 rps | |
PATCH channel | 30 rps | 300 rps | 1rps |
DELETE channel | 15 rps | 150 rps | 1rps |
DELETE tab for chat, channel | 15 rps | 150 rps | 1rps |
DELETE installedApps for chat, user, team | 15 rps | 150 rps | |
DELETE appCatalogs | 15 rps | 150 rps | |
GET /teams/{team-id} , joinedTeams |
30 rps | 300 rps | |
POST /teams | 10 rps | 100 rps | |
PUT /groups/{team-id} /team |
Six rps | 150 rps | |
POST /{team-id} / clone |
Six rps | 150 rps | |
GET channel message | 20 rps | 200 rps | 1rps |
GET 1:1/group chat message | 20 rps | 200 rps | 1rps |
POST channel message | 50 rps | 500 rps | 1rps |
POST chat member | 30 rps | 300 rps | 4rpm |
Delete chat member | 30 rps | 300 rps | 4rpm |
POST 1:1/group chat message | 20 rps | 200 rps | 1rps |
GET /teams/{team-id} /schedule and all APIs under this path |
30 rps | 600 rps | |
POST /teams/{team-id} /schedule and all APIs under this path |
30 rps | 300 rps | |
PUT /teams/{team-id} /schedule and all APIs under this path |
30 rps | 300 rps | |
POST /teams/{team-id} /sendActivityNotification |
Five rps | 50 rps | |
POST /chats/{chat-id} /sendActivityNotification |
Five rps | 50 rps | 1rps |
POST /users/{user-id} /teamwork/sendActivityNotification |
Five rps | 50 rps | |
POST /teamwork/sendActivityNotificationToRecipients | Two rps | 20 rps | |
GET /teams/{team-id} /members |
60 rps | 1200 rps | |
POST /teams/{team-id} /members |
30 rps | 300 rps | 4rpm |
GET /teams/{team-id} /channels |
60 rps | 1200 rps | 1rps |
GET /teams/{team-id} /channels/{channel-id} /members |
60 rps | 1200 rps | 1rps |
Get all channel messages for a team GET teams/ {team-id} /channels/getAllMessagesGET teams/ {team-id} /channels/allMessages |
200rps | 1000rps | |
Get all chat messages for a user GET users/ {user-id} /chats/getAllMessagesGET users/ {user-id} /chats/allMessages |
200rps | 1000rps | |
GET /teams/{team-id} /channels/getAllRetainedMessages |
200rps | 1000rps | |
GET /users/{user-id} /chats/getAllRetainedMessages |
200rps | 1000rps | |
Other GET API calls for Microsoft Teams | 30 rps | 1500 rps | 1rps |
Other API calls for Microsoft Teams | 30 rps | 300 rps | 1rps |
A maximum of four requests per second per app can be issued on a given team.
A maximum of one request per second per app per tenant can be issued on a given channel or chat.
A maximum of one request per second per user can be issued when doing POST message in a given chat or channel (This throttling limit doesn't apply to migration).
A maximum of five requests per second per user can be issued when doing List chats or Get chat or chat:removeAllAccessForUser
See also Microsoft Teams limits and polling requirements.
The preceding limits apply to the following resources:
Multitenant management service limits
Request type | Limit per tenant for all apps | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 200 requests per 20 seconds | 100 requests per 20 seconds |
Any | 2000 requests per 20 seconds | 1000 requests per 20 seconds |
The preceding limits apply to the following resources:
OneNote service limits
Limit type | Limit per app per user (delegated context) | Limit per app (app-only context) |
---|---|---|
Requests rate | 120 requests per 1 minute and 400 per 1 hour | 240 requests per 1 minute and 800 per 1 hour |
Concurrent requests | Five concurrent requests | 20 concurrent requests |
The preceding limits apply to the following resources:
You can find additional information about best practices in OneNote API throttling and how to avoid it.
Note
The resources listed earlier do not return a Retry-After
header on 429 Too Many Requests
responses.
Open and schema extensions service limits
Request type | Limit per app per tenant |
---|---|
Any | 455 requests per 10 seconds |
The preceding limits apply to the following resources:
Outlook service limits
Outlook service limits apply to the public cloud and national cloud deployments.
Limits per mailbox
The Outlook service applies limits to each app ID and mailbox combination - that is, a specific app accessing a specific user or group mailbox. Exceeding the limit for one mailbox doesn't affect the ability of the application to access another mailbox.
Limit | Applies to |
---|---|
10,000 API requests in a 10 minute period | v1.0 and beta endpoints |
Four concurrent requests | v1.0 and beta endpoints |
150 megabytes (MB) upload (PATCH, POST, PUT) in a 5-minute period | v1.0 and beta endpoints |
Outlook service resources
API | Resources |
---|---|
Search API (preview) | |
Profile API | |
Calendar API | |
Mail API | |
Personal contacts API | |
Social and workplace intelligence | |
To-do tasks API (preview) |
Outlook service limits for JSON batching
When an app makes a JSON batch request that consists of multiple, unordered individual requests to the Outlook service, by default, Microsoft Graph sends the Outlook service up to four individual requests from the batch at a time, regardless of the target mailboxes of those requests. The Outlook service can execute these requests in parallel at any point, also irrespective of the target mailbox. Since Microsoft Graph sends only up to four requests to run in parallel, the execution of that batch stays within Outlook's concurrency limits for the same mailbox, regardless of the app used.
Alternatively, an app can use the dependsOn property to order requests within a batch. Microsoft Graph sends the Outlook service one request from the batch at a time following the specified order, and Outlook executes each individual request in the batch sequentially.
In other words, when targeting the same mailbox, apps that allow multiple batch requests to run in parallel can use either of the following approaches:
- If the individual requests don't have to be ordered, have individual requests from a single batch run concurrently.
- Use the
dependsOn
property to order requests in a batch, and have up to four such batch requests run concurrently.
Project Rome service limits
Request type | Limit per user for all apps |
---|---|
GET | 400 requests per 5 minutes and 12,000 requests per one day |
POST, PUT, PATCH, DELETE | 100 requests per 5 minutes and 8,000 requests per one day |
The preceding limits apply to the following resources:
Security detections and incidents service limits
The following limits apply to any request on /security
.
Operation | Limit per app per tenant |
---|---|
Any operation on alert , securityActions , secureScore |
150 requests per minute |
Any operation on tiIndicator |
1,000 requests per minute |
Any operation on secureScore or secureScorecontrolProfile |
10,000 API requests in a 10-minute period |
Any operation on secureScore or secureScorecontrolProfile |
Four concurrent requests |
Security eDiscovery service limits
The following limits apply to any request on /security/eDiscoveryCases
.
Operation | Limit per app per tenant |
---|---|
Any | Five requests per minute |
Service Communications service limits
The following limits apply to any type of requests for service communications under /admin/serviceAnnouncement/
.
Request type | Limit per app per tenant |
---|---|
Any | 240 requests per 60 seconds |
Any | 800 requests per hour |
Subscription service limits
Request type | Limit per app for all tenants | Limit per app per tenant |
---|---|---|
POST, PUT, DELETE, PATCH | 2000 requests per 20 seconds | 500 requests per 20 seconds |
POST /reauthorize subscription by ID | 4000 requests per 20 seconds | 1000 requests per 20 seconds |
GET Subscription by Id | 2000 requests per 20 seconds | 500 requests per 20 seconds |
GET Subscription List | 40 requests per 20 seconds | 25 requests per 20 seconds |
The preceding limits apply to the subscription resource.
Tasks and plans service limits
Service limits for Planner aren't available.
The preceding information applies to the following resources:
Viva Engage service limits
Viva Engage API calls are subject to rate limiting, allowing 10 requests per user, per app, within a 30-second time period. When you exceed the rate limit, all subsequent requests return a 429 Too Many Requests
response code.