Forum Discussion
mteinovic
Feb 01, 2024Copper Contributor
MSTeams Graph API: user is getting private and shared channels which he is not a part of
The API in question: https://learn.microsoft.com/en-us/graph/api/channel-list?view=graph-rest-1.0&tabs=http As a user, I am getting the channels that I am not a part of listed. There is no flag...
VasilMichev
Feb 01, 2024MVP
What permissions are you running with? An admin user will be able to see all channels, without having to be a member of the parent team. Similarly, an Owner of the Team would see all private channels associated with it, while still not be able to access data therein.
mteinovic
Feb 02, 2024Copper Contributor
VasilMichev these are the permissions: Channel.ReadBasic.All ChannelMessage.Read.All ChannelMessage.Send Chat.ReadWrite Contacts.ReadWrite GroupMember.Read.All openid Presence.Read.All profile Team.ReadBasic.All User.Read.All email
I am not the Owner of the Team, I was added to it. I was added to some Private channels and then kicked out of them, but still getting them listed when fetching Channel list.
Maybe I'm missing something, but I don't see an issue with the permissions in my situation.