GET /v1.0/teams/{id}/channels returns HTTP 403 error

%3CLINGO-SUB%20id%3D%22lingo-sub-3298732%22%20slang%3D%22en-US%22%3EGET%20%2Fv1.0%2Fteams%2F%7Bid%7D%2Fchannels%20returns%20HTTP%20403%20error%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3298732%22%20slang%3D%22en-US%22%3E%3CP%3EI%20met%26nbsp%3BHTTP%20403%20error%20when%20invoking%26nbsp%3BGET%26nbsp%3B%3CSTRONG%3E%2Fv1.0%2Fteams%2F%7Bid%7D%2Fchannels%3C%2FSTRONG%3E%20request.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20error%20message%20is%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CPRE%20class%3D%22lia-code-sample%20language-json%22%3E%3CCODE%3E%7B%0A%20%20%22message%22%3A%22Request%20is%20not%20allowed%20for%20externally%20authenticated%20users%22%2C%0A%20%20%22errorCode%22%3A%22GuestAccessDenied%22%0A%7D%3C%2FCODE%3E%3C%2FPRE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20granted%20the%20%3CSTRONG%3EChannel.ReadBasic.All%3C%2FSTRONG%3E%20permission%20to%26nbsp%3BAzure%20AD%20app%20and%20the%20access%20token%20has%20%3CSTRONG%3EChannel.ReadBasic.All%3C%2FSTRONG%3E%20scope.%20The%20delegated%20user%20is%20a%20guest%20user%2C%20but%20the%20same%20request%20was%20successfully%20invoked%20in%20past.%20There%20are%20no%20change%20in%20Teams%20Admin%20settings%20and%20Azure%20AD%20settings.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20want%20to%20know%20how%20to%20resolve%20the%20issue.%20Is%20it%20caused%20by%20any%20settings%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3298732%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Graph%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Contributor

I met HTTP 403 error when invoking GET /v1.0/teams/{id}/channels request.

 

The error message is:

 

 

{
  "message":"Request is not allowed for externally authenticated users",
  "errorCode":"GuestAccessDenied"
}

 

 

 

I have granted the Channel.ReadBasic.All permission to Azure AD app and the access token has Channel.ReadBasic.All scope. The delegated user is a guest user, but the same request was successfully invoked in past. There are no change in Teams Admin settings and Azure AD settings.

 

I want to know how to resolve the issue. Is it caused by any settings?

0 Replies