Forum Discussion
Authentication issues
Peter,
One approach would be to request Delegated permissions for Graph SharePoint API calls and App Only permissions for Graph Security API calls. Your application would essentially be acting as a service when it retrieves security alerts, and using the user account your created when writing those alerts to the SharePoint list.
Without knowing how your application is invoked I don't know if this option is feasible for you. It doesn't sound like the app is an interactive app since you've created a user which sounds like it's acting like a service account and reading and writing alerts. App Only seems like a viable option. Just make sure if the application is interactive, that it doesn't let regular users view security alerts when they otherwise wouldn't be able to.
Jeremy Dallman thanks for your reply. Do you have a rough estimation when the bug will be fixed?
MicrosoftJeroen, we have resolved an issue with the Security API traffic manager that affected multiple customers ability to query for their Alerts. Please confirm you are seeing Alerts now.
Thanks for notifying us of the issue and thanks for participating in our Public Preview. Please let us know if you encounter this or other issues in the future.
- Thanks Jeremy! I did already some test this morning (Dutch time) when everything was already working as expected.
We have some cool plans with the security graph API - development started today! If I encounter any other issues, I will reach out to you.Getting the following error - Failed to load resource: the server responded with a status of 403 (Forbidden) while accessing graph api. When I tried using postman with bearer token - getting this error message - Either scp or roles claim need to be present in the token.
Used the below portal for App registration (Client ID + Secret)
https://apps.dev.microsoft.com
Sajith, you need to ensure the application has been granted the required permissions by the tenant admin and if using delegated permissions you need to ensure the user has the right role in AAD which is either Global Admin, or one of the Limited Administrator roles of Security Reader and/or Security Writer.
