Consented permissions not working when using Microsoft Graph Explorer to access reports

Question

I'm trying to access reports from Graph API using the Graph Explorer. However, it throws 403 Unauthorised errors.

For example the request:

GET https://graph.microsoft.com/v1.0/reports/getSharePointSiteUsageDetail(period='D30')

throws the following error

{
    "error": {
        "code": "S2SUnauthorized",
        "message": "Invalid permission.",
        "innerError": {
            "request-id": "fda8c3ec-1949-46a9-b179-e1017f7e94ab",
            "date": "2020-04-02T01:01:08"
        }
    }
}:

According to the documentation this requires the permissions 'Reports.Read.All' When looking at the permissions I have in the explorer it says that Reports.Read.All permission is 'consented'

This worked without issues in early December when I was first testing this, so unless something changed I don't know what is going on.

Am I misunderstanding what consented means in this context, or is this a problem with the Graph Explorer as this permission is marked as 'preview'?

Regardless of the source of the problem, does anyone know a way around this/how to fix it?

Dev Dev · Accepted Answer · 2020-04-09T18:30:43

Please make sure,

try repro the above using MS Graph Explorer with your tenant!!
if you're using delegated permissions to allow apps to read service usage reports on behalf of a user, the tenant administrator must have assigned the user the appropriate Azure AD limited administrator role

Let me know still you can repro the issue.

Consented permissions not working when using Microsoft Graph Explorer to access reports

1 Answers