Use Microsoft Graph API List channel messages without admin role users

Question

We are having a Tenant that has Global Tenant Admin and number of Users who is not having any Admin roles. In Microsoft Graph explorer we can able to get the list of messages(GET /teams/{id}/channels/{id}/messages) using Admin account.

But when we tried using one of the user account it says the user is not having permission to perform this action. We tried to modify the Permissions but 'ChannelMessage.Read.All' is not there and if the available 'Group.ReadWrite.All' is selected then it shows

Need admin approval Graph explorer Graph explorer needs permission to access resources in your organization that only an admin can grant. Please ask an admin to grant permission to this app before you can use it. Have an admin account? Sign in with that account

Is that possible to use the List channel messages API using normal user credentials ? If so how to enable that and will that also work for accessing programmatically using Node JS REST API calls?

@ Trinetra-MSFT , @Victor Marcus

Here is the Modify Permission screenshot and it is not having ChannelMessage.Read.All. Am I missing something ? It is a tenant global admin account.

Modify Permission from Microsoft Graph Explorer

You can use normal credentials but those permission should be granted by admin — Trinetra-MSFT
ChannelMessage.Read.All, Group.Read.All,Group.ReadWrite.All These permission should be there to call. You can see the channel message permissions in delegated or application mode — Trinetra-MSFT
@Trinetra-MSFT Can you look on the screenshot of modify permission from MS Graph explorer shared in post. It is not having ChannelMessage.Read.All. Am I missing something ? — Kumar Tech
Graph Explorer doesn't show all the permissions you need to check it in portal.azure.com — Trinetra-MSFT

Victor Marcus Victor Marcus · Accepted Answer · 2020-05-14T05:11:03

Yes, It is possible to read channel messages using normal user credentials. In this case, you will only get the messages of the channels the user is part of. The permissions you need are ChannelMessage.Read.All and Group.ReadWrite.All. You will find these permissions in Microsoft Graph Application permissions. These permissions need to be granted by a global admin. Here, I have attached the image of the channel permission.

Use Microsoft Graph API List channel messages without admin role users

1 Answers