https://graph.microsoft.com/v1.0/sites/root对于租户不起作用 [英] https://graph.microsoft.com/v1.0/sites/root is not working for tenant

问题描述

我们在访问API" https://graph.microsoft .com/v1.0/sites/root ".在我们的一个租户中，它正在工作，但是在另一个具有ADFS身份验证的租户中，它没有工作，并向我们返回以下消息:

We are facing some issues with access to API "https://graph.microsoft.com/v1.0/sites/root". In one of our tenants, it is working, however at another tenant with ADFS authentication, it is not working and return the following message to us:

{
    "error": {
        "code": "unauthenticated",
        "message": "The caller is not authenticated.",
        "innerError": {
            "request-id": "fb9267cb-1901-441e-b81c-18a831787bc2",
            "date": "2017-07-05T15:14:57"
        }
    }
}

从获取网站资源文档，则需要具有网站权限，例如Sites.Read.All或Sites.ReadWrite.All.从修改权限"弹出窗口中，我们可以看到测试用户具有该权限:

From Get a site resource documentation, the sites permissions such as Sites.Read.All or Sites.ReadWrite.All would be required. From the modify permission popup, we could see that test user has that permission:

我们可以成功运行其他api调用，例如获取我的个人资料".任何想法可能是未经身份验证"错误的原因吗?我们应该在这里检查什么?任何见解都将不胜感激.提前致谢.

We could run other api call successfully such as "get my profile". Any idea what could be the reason for the "unauthenticated" error? What should we check here? Any insights are great appreciated. Thanks in advance.

推荐答案

感谢MS小组，事实证明用户无权访问租户的根站点.所以看起来这是一个合法的回应.如果不访问根站点，则用户将无法查询该根站点的任何信息.

Thanks to MS team, it turns out that the user doesn't have access to the root site of the tenant. So it looks like that it is an legit response. Without accessing to root site, the user won't be able to query any information for that root site.

这篇关于https://graph.microsoft.com/v1.0/sites/root对于租户不起作用的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！