ms Graph API，calendarView 403-访问被拒绝的错误 [英] ms Graph api, calendarView 403-accessdenied error

问题描述

首先，我正在使用Spring，Jetty，Retrofit.

First, I'm using Spring, Jetty, Retrofit.

当我在本地使用calendarView时，它们会成功返回成功的值.

When I use calendarView in local, they return the successful values successfully.

但是，当其他人连接到我的本地服务器并调用此api时，它总是返回403-AccessDenied错误.(此外，当他们调用另一个ms api时，它们会返回成功的值.)

But, When others connect to my local server and call this api, it always returns me 403-AccessDenied error. (additionally, When they call another ms api, they return the successful values.)

我想我已经在Graph API中设置了所有建议的权限.但这可能是我的错觉.

I think I have set all the recommended permissions in Graph api. But this could be my illusion.

为了让其他人从我的本地服务器调用api，我该怎么办?

In order for someone else to call api from my local server, what should I do?

或者我在这件事上有什么遗漏吗?

Or Am I missing anything on this matter?

这些是我的权限.

"openid",
"offline_access",
"profile",
"User.ReadWrite",
"Mail.ReadWrite",
"Calendars.ReadWrite",
"User.ReadBasic.All",
"BookingsAppointment.ReadWrite.All"

这是我的天蓝色信息.

在此处输入图片描述

我正在使用此日历视图api( https://docs.microsoft.com/zh-cn/graph/api/calendar-list-calendarview?view=graph-rest-1.0&tabs=http )

And I'm using this calendar view api(https://docs.microsoft.com/en-us/graph/api/calendar-list-calendarview?view=graph-rest-1.0&tabs=http)

并在我的代码中使用此URL(在这种情况下，我正在使用批处理请求)

And Using This URL in my code(in this case, I'm using batch request)

GET | "/users/"+getAddress()+"/calendarView?startDateTime="+getStartTime()+"&endDateTime="+getEndTime()

推荐答案

根据您的描述，其他用户正在尝试访问用户"{Room}"的calendarView.

Based on your description, other users are trying to access the calendarView of the user "{Room}".

在这种情况下，您还需要2种配置.

In this case, you need 2 more configurations.

1. 用户"{Room}"将邮箱权限授予其他用户完全访问权限"在Office 365中.请参阅使用EAC向个人分配权限邮箱.(您应该可以找到下面的房间资源.并且该更改最多可能需要花费几个小时才能在系统中传播并生效.)
2. 再添加一个委托权限: Calendars.ReadWrite.Shared 到该应用程序已在Azure AD中注册.

1. User "{Room}" gives mailbox permissions "Full Access" to other users in Office 365. See Use the EAC to assign permissions to individual mailboxes. (you should be able to find the room under Resources. And the process can take up to hours for the changes to propagate through the system and be in effect.)
2. Add one more delegated permission: Calendars.ReadWrite.Shared into the app registed in Azure AD.

这篇关于ms Graph API，calendarView 403-访问被拒绝的错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！