Getting user properties value with the Graph when Azure AD Connect is in place

MVP

Hi all,
I have faced with a "strange" issue when querying user information using the Graph...basically the scenario is that I need to use the Graph to query some user properties (Department, Office Phone, Mobile Phone) for a customer that has a particularity: Local AD is synchronized with Office 365 by means of Azure AD Connect...due to this particularity, we have noted (and confirmed by Microsoft) that to get the values of this properties you will need to provide admin permissions to your App and I have confirmed this by using the Graph Explorer...indeed the key permissions seems to be Directory.AccessAsUserAll...so the question here is: is this the only way to get user properties values in this scenario where there is Azure AD Connect in place? cc @Vesa Juvonen

0 Replies