Microsoft Graph Api User.Read.All Not granted for my domain

Question

I am getting the following error or status Not granted for my domain. see the attached document
Is this because my role is User?

I tried to find who is Azure AD Global Administrator?

I followed the following steps:

Log into the Azure Portal (https://portal.azure.com).
Click on Azure Active Directory
Click on Roles and administrators
Click on Global administrator
Under Global administrator it says Microsoft Office 365 Portal

what does it mean?
How can I or someone else in organization become Global administrator?
I want API permissions->User.Read.All Not granted for mydomain

PS: My email is work email.

Update 1
My role is user

Update 2
Global administrator - Assignments say's Microsoft Office 365 Portal is my Admin. How to get these credentials?

What is your role in that tenant? – Md Farid Uddin Kiron Dec 31 '19 at 13:58 — Md Farid Uddin Kiron, Dec 31 '19 at 13:58

Jamie Nicholl-Shelley · Answer 1 · 2022-02-25T09:20:38.687

22

I was similiarly frustrated here: it's very hard to spot, however you'll notice that the 'grant admin consent for -' is reset on every update to permissions.

Therefore: simply re-tick this and wait a few seconds for the warnings to disappear.

I too thought I was missing a step elsewhere, very misleading!

edited Feb 25 '22 at 09:20

answered Feb 16 '21 at 23:48

Jamie Nicholl-Shelley

526
1
7
21

1

took me several hours to figure this out. Many thanks!!!! – jersoft Apr 11 '21 at 02:30
@jersoft no worries! I can't believe some of the work flows required for what I think is fairly standard asks. – Jamie Nicholl-Shelley Apr 13 '21 at 08:14
1

You da man! Saved the task. – Mehmet Kaplan Oct 20 '22 at 10:43

Md Farid Uddin Kiron · Answer 2 · 2019-12-31T15:13:23.717

1

For User.Read.All permission you should have Admin Consent which a User cannot avail.

You should have either Global Admin or Application administrator credentials.

Permission Required:

Please refer to this official document Permission details

Admin Credentials:

For Admin credentials details refer to this document

Office 365 Admin Role Assignment:

Hope this will help. Let me know if you have any more concern.

edited Dec 31 '19 at 15:13

answered Dec 31 '19 at 14:25

Md Farid Uddin Kiron

16,817
3
17
43

It says `Microsoft Office 365 Portal` is my admin. How to get these credentials? – ozil Dec 31 '19 at 14:30
It says mean what? As per my experience you should have that role. Please refer this [docs](https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent). In screen shot you have tried with `delegated permission` also try with `Application permission` – Md Farid Uddin Kiron Dec 31 '19 at 14:43
`Global administrator - Assignments` say's `Microsoft Office 365 Portal` is my Admin. – ozil Dec 31 '19 at 14:55
If so, in that case add your email as `Global Admin` On office 365 portal. I have updated my answer how you can do it. – Md Farid Uddin Kiron Dec 31 '19 at 15:14

score 1 · Answer 3 · answered Apr 23 '22 at 16:20

Make sure that if you're the only one or just opened the account that you are an admin on Microsoft 365.

You will need to add a TXT record in your DNS settings (F.e. Route53 - AWS) https://learn.microsoft.com/en-us/microsoft-365/admin/misc/become-the-admin?view=o365-worldwide

Once that is verified you will automatically be a global administrator and then you will have access to all admin features.

Go back to Azure and then just click on the small hard to see in grey here:

Microsoft Graph Api User.Read.All Not granted for my domain

3 Answers3