Call Microsoft Graph without an app registration
Quiz question
Why does /v1.0/me/chats fail with this action, even for admins?
Solution
- A) The token lacks the permission for chatsCorrect. The connector has a fixed list of permissions. Chats are not on it, and the account's role does not change that.
- B) Chats cannot be read through Graph at allWrong. Graph does offer chats. Only the matching permission is missing from this connector's token.
- C) The Base Resource URL is set incorrectlyWrong. With a wrong base URL every call would fail. But /v1.0/me works.
What it is about
To call Microsoft Graph you normally register an app in Microsoft Entra ID and manage secrets or certificates. The action HTTP with Microsoft Entra ID (preauthorized) takes care of that for you. You sign in once and set both Base Resource URL and Resource URI to https://graph.microsoft.com. Then you choose the method and endpoint, for example GET on /v1.0/me, and the connector gets the token itself. The catch: the token carries a fixed list of permissions. Profile, groups, files, mail and calendar work. Chats, presence or sign-in logs do not, not even with an admin role. You get further pages of a response through @odata.nextLink.
The expression from the tip
https://graph.microsoft.comWhen to use it, when not
Use it
For Graph queries on behalf of the signed-in person: profile, groups, files, mail, calendar.
Better not
When you need chats, presence, sign-in logs or Intune, or when you have no premium license.
Most common mistake
Treating a 403 as a wrong query. If the permission is missing from the token, no other syntax will help.
License
Premium Needs Power Automate Premium or another license that includes premium connectors. Source on Microsoft Learn: HTTP with Microsoft Entra ID (preauthorized), Connector-Referenz. For your whole flow: License check.
Prefer to learn with guidance? The Power Automate live course of the Power Platform Academy takes you from the basics to error handling and scopes in four weeks.
Share
Short link: powerautomate.ninja/en/138
Source: PowerPlatformTip #138, Microsoft Learn: HTTP with Microsoft Entra ID (preauthorized), Connector-Referenz.