Microsoft.Graph - Application Permissions - Microsoft Office 365 Scope - General Exception

Help Activities
, ,
1

Hello community,

I would like to send unattended emails with Azure App by using Microsoft Graph with application permissions type.

The admin access is granted.

image
image840×231 13.2 KB

I have defined multiple URI

image
image1303×182 20.9 KB

But still I get the below error. Do you have any clue why??

Microsoft.Graph.ServiceException: Code: generalException
Message: An error occurred sending the request.
—> Microsoft.Identity.Client.MsalServiceException: AADSTS1002012: The provided value for scope Mail.ReadWrite Mail.Send User.Read is not valid. Client credential flows must have a scope value with /.default suffixed to the resource identifier (application ID URI). Trace ID: Correlation ID: Timestamp: 2024-01-15 09:40:26Z at Microsoft.Identity.Client.Internal.Requests.RequestBase.HandleTokenRefreshErrorAsync(MsalServiceException e, MsalAccessTokenCacheItem cachedAccessTokenItem)
at Microsoft.Identity.Client.Internal.Requests.ClientCredentialRequest.ExecuteAsync(CancellationToken cancellationToken)
at Microsoft.Identity.Client.Internal.Requests.RequestBase.RunAsync(CancellationToken cancellationToken)
at Microsoft.Identity.Client.ApiConfig.Executors.ConfidentialClientExecutor.ExecuteAsync(AcquireTokenCommonParameters commonParameters, AcquireTokenForClientParameters clientParameters, CancellationToken cancellationToken)
at UiPath.Shared.Authentication.Microsoft.Services.MsalLogonService.AuthenticateInternalAsync(OAuthDataOptions oauth, CancellationToken cancellationToken)

2

Hey @DELautomation

The scope value should be suffixed with ‘/.default’

Make sure that if your application ID URI is “api://your-app-id” , and the scope value is “api://your-app-id/.default”.

3

@DELautomation

Is the permission for User.Read granted?

4

Hello @Archana_Gulli
Thanks for reply. I added /.default and I still get the same error

image

5

@DELautomation

Application ID should be like: api://your-app-id

Scope value should be : api://your-app-id/.default

6

Do you mean to change the APP ID in UiPath? I added api:// but it throws an error. In Azure app I can not modify the app ID.

By scope do you mean this setup?

image
image1053×97 8.54 KB

7

@DELautomation ,

When I mentioned specifying scopes for operations like Mail.ReadWrite, Mail.Send, and User.Read, I was referring to the permissions that need to be assigned to your Azure AD application in order to access Microsoft Graph API.

8

Ah ok, Thank you. Yes I have assigned those permissions.

9

@DELautomation ,
I don’t see permission granted to User.Read in the snip.

10

Indeed it was not added at the beginning but now it’s added and it still doesn’t work. For your reference, this is a snip from the studio

image
image1558×723 54.7 KB

11

How do we do both of these things within the confines of the Office 365 Scope activity? Here s the properties panel:

image
image411×981 28.6 KB

12

have a check if the firstAid can be adapted to your case as well:

1 Like
13

Hi there,

I have exactly the same problem and tried to update the application id and scope in Azure > Expose API, but it does not allow me to put a dot before “default” for the scope so mine is in the following format api://application ID/default. If I change the application name to have /.default then when I update the scope I have api://application ID/.default/default. Any ideas? Many thanks

14

Hi @VasilD,

I have opened a ticket to UiPath Support. We do no need to add /default. It was a bug in the new package for MicrosoftOffice365. As per their reply, “The unaffected version is 2.3.3.”
Please try it and keep me updated.
Good luck!

3 Likes
15

Thanks it works correctly now! It would be nice if UiPath pull back any modules with known bugs :slight_smile:

2 Likes
16

Indeed, I have spent a lot of time trying to debug this …

17

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.