Connecting to Graph API for education application permissions

user_13475579 0
Viewed 94

I am trying to create a flow process to automate creating CSV files which contains the student, teacher assignment, submissions, and submission outcomes. I have registered an app in Azure AD and I can connect to this fine via PowerShell with delegate permissions and see all of the data I need.

However, when I try to connect with application permissions EduAdministration.Read.All, EduAssignments.Read.All and EduRoster.Read.All, I can only see basic Class and Student information. So calling https://graph.microsoft.com/v1.0/education/classes works but calling https://graph.microsoft.com/v1.0/education/classes/CLASSID/assignments does not (I get a "Resource not found for the segment 'assignments'").

As I have an admin account which is a member of the CLASSID team, I can see all of this information if running from graph explorer with delegated permissions.

So, is there something else I need to do to get the application .Read.All permissions working or are there a tutorial of how to connect to graphs with Flow using delegated permissions?

microsoft-graph-edu microsoft-graph-api
1 Answers

There are a couple of things going on here:

"Resource not found for the segment 'assignments'" Error

You're receiving this error because you're attempting to call the Assignments endpoint in v1.0. Assignments is still in Beta, so you need to use /beta, not /v1.0.

  1. Once you get past the segment error, you will still have a permissions issue. The Assignments endpoint only supports Delegated scopes. The inverse is true for Classes which only return limited information using Delegated scopes. In order to call both endpoints, you'll want to have two separate tokens (one delegated, one application):

    • For /education/classes/{id}, use the Application scope EduRoster.Read.All.
    • For /education/classes/{id}/assignments/, use the Delegated scope EduAssignments.Read.
user_1055180
Related