Enabling Guests to use Planner without providing access to the Group Service in Graph

%3CLINGO-SUB%20id%3D%22lingo-sub-2979292%22%20slang%3D%22en-US%22%3EEnabling%20Guests%20to%20use%20Planner%20without%20providing%20access%20to%20the%20Group%20Service%20in%20Graph%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2979292%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20use%20Conditional%20Access%20to%20limit%20the%20applications%20that%20Guests%20can%20use%20in%20our%20Tenant.%20We've%20recently%20enabled%20Planner%20for%20Guest%20access%20but%20have%20found%20that%20Guests%20also%20require%20permission%20the%20Group%20Service%20API%20in%20Graph%2C%20as%20documented%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fgraph%2Fplanner-concept-overview%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EPlanner%20tasks%20and%20plans%20API%20overview%20-%20Microsoft%20Graph%20%7C%20Microsoft%20Docs%3C%2FA%3E%3CBR%20%2F%3E%3CBR%20%2F%3EAn%20assumption%20has%20been%20made%20that%20granting%20Guests%20access%20to%20the%20Groups%20service%20will%20allow%20Guests%20to%20read%20all%20our%20groups%20and%20get%20email%20addresses%20of%20the%20members.%20Is%20that%20a%20fair%20assumption%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2979292%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EPlanner%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Senior Member

We use Conditional Access to limit the applications that Guests can use in our Tenant. We've recently enabled Planner for Guest access but have found that Guests also require permission the Group Service API in Graph, as documented here: Planner tasks and plans API overview - Microsoft Graph | Microsoft Docs

An assumption has been made that granting Guests access to the Groups service will allow Guests to read all our groups and get email addresses of the members. Is that a fair assumption?

0 Replies