
Granting permissions normally happens through a consent page or by granting permissions using the Azure Portal application registration blade.

Additionally, those permissions must be granted to the application by a user or an administrator. The least privileged permissions that we recommend are provided in all the Microsoft Graph API method reference topics. Verify that you have requested the correct set of permissions based on the Microsoft Graph APIs your app calls. Additionally this error may occur, if you try to use a delegated access token granted to a personal Microsoft account, to access an API that only supports work or school accounts (organizational accounts).Ĥ03 Forbidden error: Have you chosen the right set of permissions? We strongly recommend that you use the Microsoft Authentication Library (MSAL) for access token acquisition. This error often means that the access token may be missing in the HTTP authenticate request header or that the token is invalid or has expired. Make sure that your application is presenting a valid access token to Microsoft Graph as part of the request. If you can't find a solution to your problem, ask a new question on Microsoft Q&A and tag with microsoft-graph*.Ĥ01 Unauthorized error: Is your token valid?

:max_bytes(150000):strip_icc()/goro-438486b26d604f3189fab2f13fa9ea82.jpg)
You can also check the answers already available on Microsoft Q&A for 401 errors and 403 errors. To resolve common authorization errors, try the steps described for the error that most closely match the error you're getting.
