Right User Permissions to use ListItem.GetUserEffectivePermissions method
I'm currently using a SharePoint account as a Service account to get files and share them in an application I'm working on using CSOM. I filter the files according to the logged-in user to check if the user has no access to the file, then I hide it, to prevent him from trying to access it and get "Permission Denied" error. So, I used ListItem.GetUserEffectivePermissions for this issue, but I need to grant the user only the permissions he needs to access and make that check. I checked the official documentation of ListItem.GetUserEffectivePermissions https://learn.microsoft.com/en-us/previous-versions/office/sharepoint-csom/ee536458(v=office.15) but unfortunately, I found no direct clue which permission does the job. So to recap what this service account needs to do is : Execute Search across all sharepoint files [SearchExecutor]. Get Login Name by Email using Utility.ResolvePrincipal (to be used in GetUserEffectivePermissions function). Use GetUserEffectivePermissions to check if the logged-in User has permission to view the file. I'd really appreciate your help as I'm kind of new to SharePoint and I searched a lot but found no clue about what I need.Delay between admin consent and ability to perform API requests
We have been experiencing long delays (up to an hour) between the moment the "admin consent" approval of our app until we can successfully perform Graph API calls for the tenant. As part of our on-boarding flow, after the user provides admin consent to our application we start performing various actions via the Graph API. Lately we have been receiving an increasing number of API call failures with "permission denied" response. It can take any time between a few seconds to an hour for the permissions granted in the admin consent form to be recognized by the Graph API. This is causing substantial friction in our on-boarding process. Has anyone else encountered this?
Unable to decrypt emails coming from the External
Bonjour les équipes, Besoin de votre aide. Depuis quelques jours, on est coincé avec https://docs.microsoft.com/en-us/information-protection/develop/ Le moteur MIP pour décoder les chiffrements d’e-mails de type « rpmsg » valide les autorisations de déchiffrement avec les serveurs hôtes qui envoient l’e-mail et non celui qui le reçoit. Par conséquent, nous ne pouvons pas déchiffrer un e-mail reçu d’une organisation externe. Avez-vous déjà rencontré ce problème dans vos organisations ? Si oui, comment l’avez-vous résolu ? Merci pour votre réponse rapide.
OWA Upload and Share Permissions
Hello...I have a user using OWA (University - Microsoft 365 A5 license) who is experiencing a new scenario/error msg., when initiating the "upload and share" option to share a locally stored file as an email attachment (gets uploaded by default to their OneDrive Attachments folder) when sending OWA email messages to colleagues. The email will send with the attachment icon/link, but recipients don't have access to it and have to choose the "request access" option, where then the user/sender can approve the request for access. The error msg., is "you don't have permission to give others access to file X" and the filename that is uploaded has red text (normally it is blue). The users has tested this scenario on multiple computers w/ multiple browsers, and changed the upload OneDrive folder location, with the same result. I can initiate the same scenario on the same computers, browsers, and files, while signed onto my OWA account w/ out issue. The user's Mailbox has a small quota size and their OneDrive account does as well. This started about two weeks ago, though as far as I know, no University Enterprise changes were made to the users account. Not sure what to look at for a solution so any help would be appreciated. Thanks!
I no longer have an edit button for assignments on one EndpointSec>DiskEncrypt>Bitlocker profiles
I have two Intune>Endpoint Security>Disk Encryption>Bitlocker policies. One is the 2+ year old deprecated policy everyone is currently on, and the other is a new policy I made two months ago. I am in the process of testing to move the company from old to new. Old policy no longer has an "Edit" button for group assignments and exclusions, much like when you don't have permissions. However, I am still able to edit the actual policy. Has anyone seen this or can help with this? Attached picture. I am using Intune Administrator permissions, and again, it's not a permissions issue as I can edit the actual policy. I have tried different browsers. I have tried another computer. The policy is scoped to default. I was last able to edit group assignments 10/25/25 Solution right now will just be to delete the old profile and move to new with no more testing. Thank you in advance, -ZP
