none
Graph Api: Deleting attachment from group post, access denied even though I have permissions RRS feed

  • Question

  • Hi, I'm not sure if this the correct forum.

    I have a question related to using Graph Api for managing our organization's Office 365 groups.

    More scpecifically I am able to view/delete groups' threads, but when I try to delete an indivindual attachement inside the post of a thread I'm getting the following response:

    {
        "error": {
            "code": "ErrorAccessDenied",
            "message": "Access is denied. Check credentials and try again., Cannot delete attachment.",
            "innerError": {
                "request-id": "1aa1be11-0eb9-4fbe-93f5-09836b3b7c43",
                "date": "2019-03-20T09:09:10"
            }
        }
    }

    The user has the required Group.ReadWrite.All permissions (consented by admin). I'm using the following call 

    DELETE /groups/{id}/threads/{id}/posts/{id}/attachments/{id}

    as per the documentation at (I can't post documentation link, says account is not verified)

    Please advise,
    Thanks in advance

    Wednesday, March 20, 2019 1:35 PM

All replies

  • Hi Alex,

    This IT Professional forum is for general questions, feedback, or anything else related to the RTM release versions of Office 2016, 2019 and Office 365 ProPlus. To help you better resolve the issue, I will move the thread to Office 365 for Developer Forum. You may get more helpful suggestions there.

    Hope you could resolve the issue smoothly.

    Best Regards,

    Herb


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.

    Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Office 2019.


    Thursday, March 21, 2019 2:34 AM
  • Hi Herb,

    thank you for your help

    Thursday, March 21, 2019 11:36 AM
  • did you click Grant permissions button (I assume that you use Azure portal V1: https://portal.azure.com) after consenting Group.ReadWrite.All permissions?

    Blog - http://sadomovalex.blogspot.com
    Dynamic CAML queries via C# - https://github.com/sadomovalex/camlex

    Friday, March 22, 2019 2:59 PM
  • Hi sadomovalex

    yes the permissions have been granted and as I said, I don't have problem performing other requests (like deleting the thread), which require the same permissions. I can't include images because my account isn't verified, but I can see in graph explorer, that the permissions have been consented and I can see in Azure portal that permissions have been granted (both delegate and application).

    Thanks

    Friday, March 22, 2019 3:15 PM
  • than you may open support ticket in MS. Some time ago we have found problem with getting custom groups schema extension together with other standard fields and opened ticket in MS. After some time they confirmed that this is product bug and it was fixed at the end. But it took a while of course.

    Blog - http://sadomovalex.blogspot.com
    Dynamic CAML queries via C# - https://github.com/sadomovalex/camlex

    Thursday, March 28, 2019 2:57 PM