rss.livelink.threads-in-node

Filters containing Swedish öäå stopped returning any results

MartaWays — Wed, 12 Aug 2026 15:33:13 GMT

For at least a week now, in some tenants, filters in verticals stopped showing any results for the values containing Swedish characters ö, ä, å. We have not done any changes to search configuration in any of the affected tenants (some continue to work correctly, no changes there either). These just stopped working.

Steps I used to reproduce it:

1) Create a new communication site

2) Add single line text column to the documents library

3) Upload some test documents and tag them with "aaa", "bbb", "öäå"

4) Map newly created crawled property for that column to previously unused RefinableString managed property in the tenant search administration

5) Create a new vertical in the site and select newly mapped managed property as a filter

6) Reindex the library (after schema change)

7) Search for "*" in the site, switch to the new vertical

8) The new filter appears correctly, with all the values expected, but only selecting "aaa" or "bbb" shows correct results. Selecting "öäå" gives no results.

What's interesting is that the indexing seems to be working fine, because when instead of filtering I use a query (by entering " RefinableString07=öäå " in the search box) I get the correct results. So it's only refining/filtering that breaks.

Have there be any recent changes that could have caused that? We have many customers we have configured search for and some are now reporting that their filters that worked fine for a long time don't work anymore.

Graph /users query with mailboxSettings filters/expands excludes unlicensed users

Siarhei_Kuchuk_Work — Wed, 05 Aug 2026 09:37:30 GMT

Hello Microsoft Graph team,

I would like to report what appears to be a bug in Microsoft Graph user queries involving mailboxSettings.

Issue summary:

When mailboxSettings is used in a filter or expand clause on /users, unlicensed users are not returned, even when they should match the filter.

Example scenario:
Filter used: mailboxSettings/userPurpose ne 'room'

Observed behavior:
Users without Exchange license/mailbox are excluded from results (or result set appears truncated to mailbox-enabled users).

Expected behavior:
All users should be considered in /users query evaluation.
If a user has no mailbox settings, behavior should be consistent and documented (for example null handling), but those users should not be silently dropped from /users results unless explicitly filtered out by query semantics.

Reproduction steps:

In a tenant with mixed users:

Licensed mailbox users
Unlicensed users without mailbox

Run a /users query that includes mailboxSettings in filter and/or expand.
Compare returned users with a baseline /users query without mailboxSettings conditions.
Notice unlicensed users disappear when mailboxSettings is involved.

Sample request patterns:

GET https://graph.microsoft.com/v1.0/users?$filter=mailboxSettings/userPurpose ne 'room'
GET https://graph.microsoft.com/v1.0/users?$expand=mailboxSettings&$filter=mailboxSettings/userPurpose ne 'room'

Virtual Event Legal Terms

psullivan — Tue, 28 Jul 2026 15:47:02 GMT

Hello all -

I'm currently in the process of attempting to integrate Team webinar registration into my Drupal site, but we discovered an issue where if this Legal Terms field is added to the Event > Registration > Configuration:

It doesn't show up when we GET predefined questions, but we can't create a registration without somehow returning a response for this field. We get this error:

But we can't find anything in the graph API documentation about how to structure a POST to include an agreement to the terms of use. In the graph api metadata I do see

an unknownFutureValue enum which is in the same place in the list as where Legal Terms is in the Teams UI.

Is there any current way around this, or is this just a feature that will be added to the API eventually? We'd have no problem just never selecting Legal Terms and including our own checkbox that would have to be checked to submit the registration, but then users who register for the event outside of our Drupal site would not have to agree to our terms to register because the only way to see it here

is to add the Legal Terms field to the configuration.

Retrieve all Teams transcripts a bot has attended to using Graph API

oih — Wed, 08 Jul 2026 14:04:28 GMT

Hi there,

I've been struggling for a lot of time trying to get this done. Has anyone been able to achieve something like this ?

I wanted to :

1- Get all the meetings and transcripts of the tenant

2- Filter on those where the bot was attending

3- Get the transcripts when available.

4- Add rules to restrict the bot's access

Right now I am stuck with the OAuth :

The application 'bot-transcript' asked for scope 'OnlineMeetings.Read.All' that doesn't exist on the resource '00000003-0000-0000-c000-000000000000'.

But this permission was added, and really seems to exist. Right ?

Thanks in advance for any kind of help you could give me.

Authentication methods for SSPR

michaelhosdez — Thu, 18 Jun 2026 13:32:37 GMT

Hello,

We have a Microsoft Entra ID P1 environment with a lot of users (thousands).

Our users are created in Active Directory and synced to Entra with Azure AD Connect (latest version).

We want to set authentication methods (for password resets: SSPR) for every user automatically.

I wrote a C# app to get all info from our internal systems and set the authentication methods for every user via the Graph API.

NuGet package used: Microsoft Graph v6.2.0

Code example:

//Execution

var batchResponse = await graphClient.Batch.PostAsync(batchRequest);

//The batchRequest is a collection of multiple request

// Add email method

userResponse.RequestId = await batchRequest.AddBatchRequestStepAsync(

graphClient.Users[userId].Authentication.EmailMethods.ToPostRequestInformation(emailMethod)

);

// Add phone method

userResponse.RequestId = await batchRequest.AddBatchRequestStepAsync(

graphClient.Users[userId].Authentication.PhoneMethods.ToPostRequestInformation(phoneMethod)

);

//Objects:

var phoneMethod = new PhoneAuthenticationMethod

{

PhoneNumber = phoneNumber,

P h o n e T y p e = AuthenticationPhoneType.Mobile

};

var emailMethod = new EmailAuthenticationMethod

{

EmailAddress = emailAddress

};

Source:

https://learn.microsoft.com/en-us/graph/api/authentication-post-emailmethods?view=graph-rest-1.0&tabs=csharp

Problem:

When I get a “success” response, the email / phone is always added to the user, but not always activated / visible as an authentication method.

In other words, when I take a look under “Authentication Methods”, the phone and/or email address is not always displayed so it is not usable as an SSPR method.

The audit log shows that an email or phone was added successfully.

When I manually add the phone or email address (GUI), it’s correctly registered as an authentication method and visible.

In Microsoft Entra, phone and email authentication methods are enabled for everyone.

Phone audit log:

Activity Type: User registered security info

Status: success

Status reason: User registered phone method

Modified properties:

Id: "..."

P h o n e T y p e : "Mobile"

PhoneNumber: "....."

Email audit log:

Activity Type: User registered security info

Status: success

Status reason: User registered Email Authentication Method

Modified properties:

EmailAuthenticationMethod.Email: "......"

The only difference i can find is an Azure Credential Configuration Endpoint Service audit log entry where the following attributes are changed:

StrongAuthenticationUserDetails:

[{"PhoneNumber":"+xx .....","AlternativePhoneNumber":null,"Email":".....@.....com","VoiceOnlyPhoneNumber":null}]

Included Updated Properties:

"StrongAuthenticationUserDetails"

TargetId.UserType:

"Member"

For users where the Azure Credential Configuration Endpoint Service audit log entry is found, the authentication methods work, for others it doesn't.

I’m confused and I hope someone can explain this behavior.

Graph Client Application[xx].PatchAsync not working as expected

dBarrettTP — Tue, 05 May 2026 17:28:09 GMT

I am experiencing a problem with the Graph API client Microsoft.Graph (5.104.0) not updating the IdentifierUrls when we call client.Application[xx]PatchAsync(applicationObject)

This code in our system has not changed but around 10 days ago started failing.

We use the graph API to have our system create app registrations for our customers apps, we do this

var app = await Client.Applications.PostAsync(new Microsoft.Graph.Models.Application { DisplayName = "SOME APP NAME" });

We then need to set the identifier URL, which we do like this

var application = new Microsoft.Graph.Models.Application { IdentifierUris = new List<string> { $"https://{_graphApiOptions.TenantName}/{app.AppId}" }, Api = new ApiApplication { RequestedAccessTokenVersion = 2 } }; await Client.Applications[app.Id].PatchAsync(application);

We are seeing app registrations being created but the Identifier URL is not set, no exceptions, nothing to indicate failure, its just not setting it.

The above code is simplified, we have a retry process where we will do a get and check the registration and then try the patch again if its not worked (with a delay between these operations.

As I said, our app has not changed (Other than updating to a newer version of the client as we were a bit behind).

I know we *could* set the identifier URL in the initial post however that would cause problems with consistency as we have thousands of customers with their apps client ID in the Identifier URL, its in all of our onboarding emails and is referenced in our docs - if we change the format now its going to be a massive issue as we will need to update all of our support docs and processes for the new format so we want to avoid this where possible.

Creation of bookings appointment leads to "UnknownError"

markusschnepf — Fri, 24 Apr 2026 19:30:00 GMT

Hi All,

I struggle to create an appointment via graph api.
I set up an app registration, added user, role, permissions and gave admin consent. i can successfully use GET requests to
- create a bearer token
and use this token to
- get company info
- get existing appointments
- get the services of your shared booking calender etc.

but when I try to create a new appointment, i always get responses like this

{
    "error": {
        "code": "UnknownError",
        "message": "",
        "innerError": {
            "date": "2026-04-24T19:18:44",
            "request-id": "178521f3-3e06-4790-a399-bdeda1c3eea7",
            "client-request-id": "178521f3-3e06-4790-a399-bdeda1c3eea7"
        }
    }
}

this is an example POST request (i removed all personal data) I want to send to:
https://graph.microsoft.com/v1.0/solutions/bookingBusinesses//appointments

important:
- the two customer questions I answered are mandatory, so i needed to fill add them to the request.
- also, I made the "additionalNote" mandatory in my service configuration.
- i added my staff ID to make sure, the problem is not about nobody being available.
for "start" and "end" i chose an appointment slot in which i am available, checked through our booking page.

unfortunately, this page does not really help. Erstellen von bookingAppointment - Microsoft Graph v1.0 | Microsoft Learn

{
"@odata.type": "#microsoft.graph.bookingAppointment",
"additionalInformation": "test",
"customerEmailAddress": "email address removed for privacy reasons",
"customerName": "markus",
"customerNotes": "Fernwartung, Outlook-Probleme",
"additionalNotes": "Fernwartung – Outlook synchronisiert nicht",
"customerPhone": "+4912345678",
"customers": [{"@odata.type": "microsoft.graph.bookingCustomerInformation"}],
"customerTimeZone": "Europe/Berlin",
"duration": "PT30M",
"start": {
"dateTime": "2026-04-27T14:00:00.0000000Z",
"timeZone": "Europe/Berlin"
},
"end": {
"dateTime": "2026-04-27T14:30:00.0000000Z",
"timeZone": "Europe/Berlin"
},
"filledAttendeesCount": 1,
"isCustomerAllowedToManageBooking": true,
"isLocationOnline": true,
"maximumAttendeesCount": 1,
"optOutOfCustomerEmail": true,
"priceType": "priceVaries",
"price": 0.0,
"serviceId": "<the correct service id>",
"serviceName": "30 Minuten Remoteunterstützung",
"serviceNotes": "servnotes",
"smsNotificationsEnabled": false,
"staffMemberIds": [
"<my correct staff id>"
],
"customerQuestionAnswers": [
{
"questionId": "9dde25ae-14fe-451d-9abd-e12532170a49",
"answer": "Remoteunterstützung"
},
{
"questionId": "10e2768c-4a0a-420e-ac93-da2ed25fc787",
"answer": "MS-Teams Konferenz"
}
]
}

Microsoft Graph - copilot/search how to get nextLink

Andrew Morgan — Wed, 08 Apr 2026 13:30:00 GMT

Hi, I'm having issues getting all the result back from from the search. I'm using "Graph Explorer" to try out /beta/copilot/search, using the request:

{ "query": "test", "pageSize": 10, "dataSources": { "oneDrive": { "resourceMetadataNames": [ "title", "author" ] } } }

I'm getting the response:

{ "searchHits": [ { "webUrl": "https://xxx.sharepoint.com/sites/xxxx/Documents/AM%20Test.docx", "resourceType": "listItem", "preview": "This is a Template Document This field, AM <c0>Test</c0>,comes from a workflow", "resourceMetadata": { "title": "AM Test", "author": "Andrew Morgan" } }, { "webUrl": "https://xxx.sharepoint.com/sites/xxxx/Documents/Test%20project.docx", "resourceType": "listItem", "preview": "This is a Template Document. This field, Test project,comes from a workflow", "resourceMetadata": { "title": "Test project", "author": "Andrew Morgan" } }, { "webUrl": "https://xxx.sharepoint.com/sites/xxxx/Documents/Presentation%20File.pptx", "resourceType": "listItem", "preview": "This is a test", "resourceMetadata": { "title": "Presentation File.pptx", "author": "Andrew Morgan" } }, { "webUrl": "https://xxx.sharepoint.com/sites/xxxx/Documents/Test%20project.xlsx", "resourceType": "listItem", "preview": "Input Key notes", "resourceMetadata": { "title": "Test project", "author": "Andrew Morgan" } }, { "webUrl": "https://xxx.sharepoint.com/sites/xxxx/Documents/Test%202.docx", "resourceType": "listItem", "preview": "Hello Everyone,\r\nWelcome to …......\r\n", "resourceMetadata": { "title": "Test 2", "author": "Andrew Morgan" } } ], "totalCount": 1668 }

What I dont understand is the totalcount is 1668. Buit it doesnt seem to make any difference what I set pageSize to in the request I only ever get back 5 results and also I was expecting "@odata.nextLink" to get the next page of results.

Can anyone shed any light on what i'm doing wrong or is it that i'm not understanding the document here:

https://learn.microsoft.com/en-us/microsoft-365/copilot/extensibility/api/ai-services/search/copilotroot-search

Thanks in advance!

Microsoft Graph: Private channel SharePoint site URL naming appears to have changed

TheKevin — Fri, 03 Apr 2026 04:06:58 GMT

📄 Question

We are creating private channels using the Microsoft Graph API:

POST https://graph.microsoft.com/v1.0/teams/{team-id}/channels

With the following payload:

{ "@odata.type": "#microsoft.graph.channel", "displayName": "Project-Channel-001", "description": "Sample private channel for testing", "membershipType": "private", "members": [ { "@odata.type": "#microsoft.graph.aadUserConversationMember", "******@odata.bind": "https://graph.microsoft.com/v1.0/users/{user-id}", "roles": ["owner"] } ] }

🔍 Observed Behavior

When the private channel is created, the associated SharePoint site is provisioned automatically (as expected).

However, the URL format appears to have changed.

Previously observed behavior:

https://{tenant}.sharepoint.com/sites/ProjectTeamURL-Project-Channel-001

Current behavior:

https://{tenant}.sharepoint.com/sites/ProjectTeamName-Project-Channel-001

❗ Impact

This change introduces several issues:

Breaks deterministic URL generation logic
Produces longer and less predictable URLs
Introduces dependency on display name, which is mutable and may contain unexpected characters
Impacts existing automation and integrations relying on the previous pattern

❓ Questions

Has there been a recent change in how SharePoint site URLs are generated for private channels?
Is this behavior intentional and documented, or a regression?
Is there any way (via Graph or otherwise) to:
- Control the generated SharePoint site URL, or
- Retrieve the final site URL deterministically without relying on pattern assumptions?
Is the previous {ParentTeamUrl}-{ChannelName} format still expected in some scenarios, or has it been deprecated?

🧪 Additional Notes

This behavior is observed when creating channels via Microsoft Graph (v1.0)
The issue is reproducible across multiple test scenarios

🙏 Any clarification from Microsoft or others encountering this would be appreciated.

Microsoft Graph callRecords Webhook Not Triggering for Bot Initiated Calls

siddharthaveer — Mon, 30 Mar 2026 15:15:58 GMT

Hii,

I am working with the Microsoft Graph API and have set up a subscription on `/communications/callRecords` to receive webhook notifications whenever a new call record is created in our tenant.

Our Setup:

- Subscription resource: `/communications/callRecords`

- Change type: `created`

- Permission: `CallRecords.Read.All` (Application type, admin consent granted)

- Token: Generated using `client_credentials` (app-only token, NOT delegated)

What is Working:

- Webhook fires correctly for calls made from the Teams interface (user-to-user calls)

- Bot callback URL receives call state events (call establishing, established, terminated)

- callRecords ARE generated and visible via `GET /communications/callRecords` for bot calls too

The Problem:

- Webhook does NOT fire for calls initiated programmatically via `POST /communications/calls` (bot/application identity calls)

- Even though the callRecord exists and is visible in Graph API, no webhook notification is sent

Our Bot Call Payload:

```json

{

"@odata.type": "#microsoft.graph.call",

"callbackUri": "https://our-server.com/webhook",

"source": {

"identity": {

"application": {

"id": "our-app-id",

"displayName": "My Calling App"

}

"targets": [

{

"identity": {

"user": {

"id": "target-user-id",

"displayName": "User"

}

"requestedModalities": ["audio"],

"mediaConfig": {

"@odata.type": "#microsoft.graph.serviceHostedMediaConfig"

}

```

Our Questions:

1. Is this a known limitation — that `callRecords` webhooks do not fire for application/bot-initiated calls?

2. If the callRecord IS generated and visible via GET, why is the webhook notification system not triggering?

3. Is there any configuration, permission, or approach that can make the webhook fire for bot calls the same way it does for Teams interface calls?

4. Is `callChainId` the only reliable way to fetch callRecords for programmatically initiated calls?

We have already verified:

- Subscription is active and not expired

- Correct Application permission with admin consent

- App-only token used for subscription creation

- Webhook endpoint responds with 202 within 3 seconds

- callRecord is visible via GET after waiting 150 minutes

Waiting 150 minutes and polling manually works, but we want real-time webhook notifications just like we get for Teams interface calls.

Any official clarification or guidance from Microsoft engineers would be highly appreciated.

Thank you!

How long are kept onlineMeetings data (main teams data, attendanceReports)

jcamsler — Fri, 27 Mar 2026 16:06:02 GMT

Hi all,

I was wondering how long are kept teams attendances data.

We created meeting by API in the past, but now the meeting is not found.

Is there a purge done by MS ? If yes in wich frequency ?

Thanks for you support

Getting available time slots in Booking API

JesperNG — Wed, 25 Mar 2026 08:52:26 GMT

I am dumbfounded by the process of getting available/bookable time slots for a service in the Bookings API.

As I understand it, and as I have it working, I have to:

Fetch information about the service to get the SchedulingPolicy and its General and Custom availabilities.
Fetch information about the staff members connected to the service.
Fetch information from getStaffAvailability
Manually enumerate the time slots according to time slot interval, respecting the minimum lead time and maximum advance time.
Manually verify for each time slot whether any staff is available given the availability information.

(I could fetch the calendarView information but that only shows booked appointments, and so if a staff member is busy or out of office with another calendar event, that is not taken into account and the customer risks booking a time slot that was never possible to begin with.)

All this while managing time zone conversions at every step.

Is there really not one endpoint that just returns which time slots are available for booking right now for a given service within a given date/time range?

I was unable to send emails from 10:44 to 11:00 UTC-5

lilxblue — Wed, 18 Mar 2026 16:35:32 GMT

Has anyone else had the same problem?

Unable to retrieve all attachments from forwarded Outlook emails using Graph API

akshaybabar — Sun, 15 Mar 2026 12:45:31 GMT

We have integrated Outlook with our system using Microsoft Graph API and subscribed to message events. Whenever we receive an event, we process the email message at our end.

Currently, we are facing an issue related to attachments in forwarded email conversations.

Scenario

An email conversation contains multiple replies.
Some of these replies contain attachments.
When a user forwards the entire email thread, Outlook generates a forwarded email that includes the conversation history in the email body.

Problem

When we receive the forwarded email event and fetch the message details using the Microsoft Graph API, we observe the following:

The forwarded email only contains the latest reply's attachment.
Attachments from earlier replies in the thread are not included in the forwarded message attachments.
In some cases:
- The first reply contains an attachment.
- Subsequent replies do not contain attachments.
- When the user forwards the email, the forwarded message JSON shows: hasAttachments: false

But, the forwarded email body still contains the previous conversation that had attachments.

Our Questions

Is there a way to retrieve all attachments from the entire email thread when a conversation is forwarded?

Can we retrieve these attachments using the current user's access token via Microsoft Graph API?

If there is a way, please also let us know how we can identify forwarded emails using the Microsoft Graph API, so that we can apply this solution only for forwarded emails.

Our Requirement

We need a reliable solution that works in production to ensure that all attachments from the email conversation are retrieved, even when the email thread is forwarded.

This issue is currently impacting our production system, so we would greatly appreciate any guidance on the correct approach.

Thank you in advance for your support.

Mails with attachments sent via the Graph API are stuck in drafts folder and not being sent

abhaykrishnakasavaraju — Thu, 05 Mar 2026 04:45:22 GMT

Mails being sent via Graph API using the createUploadSession way is keeping the mails in the Drafts folder and not being sent. This was working till mid January. Is there any graph update/ api deprecation that happened recently that is causing the issue?

Is principalId Always a GUID in Microsoft Graph ??

Agathiyan — Fri, 13 Feb 2026 08:32:21 GMT

{

"error": {

"code": "Request_BadRequest",

"message": "Invalid GUID:HR",

"innerError": {

"date": "2026-02-13T06:44:24",

"request-id": "87678d90-1d94-4131-a705-4356ad3568a4",

"client-request-id": "63569c7b-1dea-42d4-8d72-aa3668c78418"

}

We’re encountering an issue with the Microsoft Graph API response for directoryRole

Recently, one of our Graph API calls started returning a response where the principalId value appears to be a custom string instead of the expected GUID. In our code, we loop through each id from the delta response, assuming it will always be a valid GUID. However, we are now getting errors because one of the returned principalId values does not match the expected format.

Our questions:

Is it possible for Microsoft Graph API to return a custom string instead of a GUID for principalId?
Has anyone experienced similar behavior with delta queries for directoryRole or any other object?
Are there any known scenarios where the principalId format differs from the standard GUID?

Any insights would be appreciated.

Microsoft Graph API returns 502 Bad Gateway (UnknownError) when calling List members of a chat

cat2552 — Fri, 06 Feb 2026 06:40:08 GMT

Description:

I am encountering a persistent 502 Bad Gateway error with the UnknownError code when attempting to list members of a specific chat via the Microsoft Graph API v1.0. This issue occurs even though the chat ID is valid and the authorization token has the necessary permissions.

API Endpoint:

GET /v1.0/chats/{chat-id}/members

Steps to Reproduce:

1. Obtain a valid access token with Chat.Read or Chat.ReadWrite permissions.

2. Call the endpoint for a meeting chat:

https://graph.microsoft.com/v1.0/chats/19:meeting_NmU5Yjk3NTAtYTk2ZS00Yzg0LWEyYmQtZTJhMjI4NmJjZmRh@thread.v2/members

3. The API returns a 502 Bad Gateway response.

Debug Information (Request Details):

* Date: 2026-02-06 06:17:55 (GMT)

* Request ID: be906f9e-2108-4722-91b8-ecee8bfb41f0

* Client Request ID: be906f9e-2108-4722-91b8-ecee8bfb41f0

* DataCenter: Germany West Central

* X-ms-ags-diagnostic: {"ServerInfo":{"DataCenter":"Germany West Central","Slice":"E","Ring":"4","ScaleUnit":"001","RoleInstance":"FR2PEPF0000118F"}}

Raw Response Body:

{

"error": {

"code": "UnknownError",

"message": "Bad Gateway",

"innerError": {

"date": "2026-02-06T06:17:55",

"request-id": "be906f9e-2108-4722-91b8-ecee8bfb41f0",

"client-request-id": "be906f9e-2108-4722-91b8-ecee8bfb41f0"

}

Additional Context:

The connection is established successfully via TLS 1.3, but the upstream server seems to be failing. This happens specifically with meeting-related chat threads. Could you please investigate if there is a service degradation or a specific issue with this chat object in the Germany West Central region?

Intermittent connection failures with login.microsoftonline.com since Jan

vinodivinod — Wed, 04 Feb 2026 15:50:05 GMT

we are getting intermittent connection failures (handshake error http -1) while connecting to token URL -

"login.microsoftonline.com" since last one month. Anything changed as far as accessing this graph API access token URL? tried grabbing certificate from this URL but still the issue persists. which certificate should we be using?

anybody has any insights on this issue?

unable to send notification to teams channel using graph api

maram_akhil_21 — Wed, 04 Feb 2026 07:26:20 GMT

We tried to send notification to teams channel using microsoft graph api via python we can able to send to message to the channel but the notification is not getting triggered in the activity tab we have refered below documentation.

team: sendActivityNotification - Microsoft Graph v1.0 | Microsoft Learn

Also we don't need device authentication and browser authentication please share approach to bypass those things. below is the error we are facing.

raise exc

msgraph.generated.models.o_data_errors.o_data_error.ODataError:

APIError

Code: 403

message: None

error: MainError(additional_data={}, code='Forbidden', details=None, inner_error=InnerError(additional_dmsgraph.generated.models.o_data_errors.o_data_error.ODataError:

APIError

Code: 403

message: None

error: MainError(additional_data={}, code='Forbidden', details=None, inner_error=InnerError(additional_d APIError

Code: 403

message: None

error: MainError(additional_data={}, code='Forbidden', details=None, inner_error=InnerError(additional_d Code: 403

message: None

error: MainError(additional_data={}, code='Forbidden', details=None, inner_error=InnerError(additional_d message: None

error: MainError(additional_data={}, code='Forbidden', details=None, inner_error=InnerError(additional_d error: MainError(additional_data={}, code='Forbidden', details=None, inner_error=InnerError(additional_data={}, client_request_id='________-___-____-____-____________', date=datetime.datetime(2026, 2, 3, 14, 37, 8), odata_type=None, request_id='________-___-____-____-____________'), message="Application with AAD App Id '________-___-____-____-____________' is not authorized to generate notifications about 'https://graph.microsoft.com/v1.0/teams/6a6079bc-feaf-4865-bc21-1201b310c25c' to the recipient. Ensure that the expected Teams app is installed in the target scope (user, team, or chat).", target=None).

Please help us to resolve this issue.

Deleted security groups return "securityEnabled": false, appear as ‘unrecognized’ in Entra admin

soniabouna — Wed, 28 Jan 2026 21:49:12 GMT

When retrieving the list of soft-deleted groups with Graph, both M365 groups and security groups are returned.

However, the securityEnabled flag is returned as false for security groups. Is this a bug?

This likely leads to displaying them in the Entra admin center as 'Unrecognized' type.