Need an example of HTTP call to Microsoft Graph in flow

[Anonymous]

I am running into several issues trying to do a HTTP action to a Microsoft Graph service:

I get the correct Bearer token and pass it to the following HTTP actions with different results.

https://graph.microsoft.com/v1.0/groups/{XXXXX-YYYY-PPPP-NNNN-ZZZZZZZ}/members - Works perfectly fine when called in Flow.

https://graph.microsoft.com/v1.0/groups/{XXXXX-YYYY-PPPP-NNNN-ZZZZZZZ}/events - ERROR when called in Flow.

The error is:

{

"error": {

"code": "ErrorAccessDenied",

"message": "Access is denied. Check credentials and try again.",

"innerError": {

"request-id": "c16fdd8f-c633-4ab7-af56-fc72869e38cc",

"date": "2018-12-13T13:39:45"

}

}

}

I have enabled the following access on the Microsoft Graph App:

Application permissions:

Read all Groups

Read all users full profiles

Delegated Permissions:

Read all users basic profiles

Read all groups

Read users calendars

Read user and shared calendars

These service calls work fine for in the Microsoft Flow Explorer. So not sure why I get these issues only in the flow.

Please Help as it is urgent.

[AlanPs1]

"code": "ErrorAccessDenied"

"message": "Access is denied. Check credentials and try again."

Hi Vish, It says access denied so I'd start by accessing your Azure App Registration and applying all delegated permissions and retesting. 

I say this based on the error alone as haven't checked the scope and you do mention your first call worked.

Here is the method I use to Call Graph (Organization scope in this example) with full permisssions on the App and I have never had any issues, maybe it can help you on a bit.

I'd be interested if by following my example it works or not.

[AlanPs1]

Hi @Anonymous.

You mentioned this was urgent, was the sollution provided of use to you?

Please mark with thumbs up if you found this information helpful!
If this addresses your issue, please mark your post as Solved.

[Anonymous]

I am still waiting to convince the Azure Admin team to authorize the permissions. They need more information to ensure the permissions do not introduce security risks. If there is a specific permission level, it is more easy to convince, instead of checking all permissions for delegation. 

[AlanPs1 · Accepted solution]

You could visit graph explorer, authenticate and test by adding the permissions you want one by one

https://developer.microsoft.com/en-us/graph/graph-explorer?request=me%2Fpeople&version=beta

You do the above by choosing "modify permissions"

Here is the graph permission reference also - https://docs.microsoft.com/en-us/graph/permissions-reference . It should help you with the permissions sets. 

Also, as a suggestion, you can create a test tenant for Office 365 E3 & E5 which means you can simulate this in a non production environment.

https://signup.microsoft.com/signup/logout?offerid=B07A1127-DE83-4a6d-9F85-2C104BDAE8B4&dl=ENTERPRIS...

Just some additionjal steps I have used before taht helped me be more specific with required permissions, but I guess all you need is to test it by granting all permissions and see if it works. If it works you know it's permissions related and you can put the permissions back to the way they were.

Hopefully the additional information will be of help to you.

Please mark with thumbs up if you found this information helpful!