1
votes

i am not able to consent the graphi api permission in active directory v2 (app model v2). I tried below: Incremental and dynamic consent example

https://azure.microsoft.com/en-us/documentation/articles/active-directory-v2-compare/

Error i got: The provided value for the input parameter 'scope' is not valid. The scope https://graph.windows.net/directory.read is not valid.

consent url

1

1 Answers

1
votes

The Microsoft Graph (https://graph.microsoft.com) partially supports the App Model v2 - specifically the outlook scopes (e.g. mail.read) and directory scopes (e.g. directory.read.all). Other scopes such as File and Sites don't.

The Azure AD Graph (https://graph.windows.net) does not support the App Model v2 at all.

Directory.Read isn't being accepted because it isn't a valid scope, you're either after User.Read or Directory.Read.All

See http://graph.microsoft.io/en-us/docs/authorization/permission_scopes for more info.