Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No way to use my own tenant ? #3423

Open
terryclancy opened this issue Nov 6, 2024 · 8 comments
Open

No way to use my own tenant ? #3423

terryclancy opened this issue Nov 6, 2024 · 8 comments

Comments

@terryclancy
Copy link

Is your feature request related to a problem? Please describe.
No way to use my own tenant ?

Describe the solution you'd like
When using MS Graph Explorer at https://developer.microsoft.com/en-us/graph/graph-explorer does it always use a sample tenant with a sample registered app and secret ? Even if you log on ? Is it is possible to use your own tenant ? If so then I assume you would need to provide client ID, client secret, tenant ID etc as described at https://learn.microsoft.com/en-us/graph/auth-v2-user?tabs=http, but I see no where in the UI to provide these parameters ?
Please answer questions above and if this remains an issue then it would be good to be able to use with my own tenant, App ID and App Secret.

Describe alternatives you've considered
Insomnia

Additional context
Add any other context or screenshots about the feature request here.

@ElinorW
Copy link
Collaborator

ElinorW commented Nov 13, 2024

Hi @terryclancy,
When using MS Graph Explorer, it initially connects to a sample tenant allowing you to experiment with various MS Graph APIs without affecting real data. However, signing in allows you to interact with your actual tenant's data. In this case Graph Explorer uses it's own application registration to authenticate and authorize requests on your behalf. It doesn't require you to provide your own client ID, client secret or tenant ID.

@terryclancy
Copy link
Author

Wow - that is super interesting. I have noticed a similar behavior with the MS Graph CLI - does your answer apply in that case as well ?

@microsoft-github-policy-service microsoft-github-policy-service bot added Needs: Attention 👋 Author has responded to the issue and removed Needs: Author Feedback labels Nov 14, 2024
@ElinorW
Copy link
Collaborator

ElinorW commented Nov 14, 2024

Yes it does

@ElinorW ElinorW added Needs: Author Feedback and removed Needs: Attention 👋 Author has responded to the issue labels Nov 14, 2024
@terryclancy
Copy link
Author

If you log on so you are then using your own tenant - does it still use it's own application registration to authenticate and authorize requests on your behalf ?

@microsoft-github-policy-service microsoft-github-policy-service bot added Needs: Attention 👋 Author has responded to the issue and removed Needs: Author Feedback labels Nov 15, 2024
@ElinorW
Copy link
Collaborator

ElinorW commented Nov 18, 2024

@terryclancy yes

@ElinorW ElinorW added Needs: Author Feedback and removed Needs: Attention 👋 Author has responded to the issue labels Nov 18, 2024
@terryclancy
Copy link
Author

Using definitions at https://learn.microsoft.com/en-us/graph/auth/auth-concepts , when you use MS Graph Explorer without logging on, is it using App Only Access ? And then after you log on does it use Delegated Access? or App Only Access ?

Also it is not working for me as you describe ? If I log on to my tenant and try a Threat Intelligence API call like https://graph.microsoft.com/v1.0/security/threatIntelligence/vulnerabilities/CVE-2021-44228 it works fine. But without logging on it fails with this error:
{
"error": {
"code": "UnknownError",
"message": "",
"innerError": {
"date": "2024-11-22T00:14:21",
"request-id": "22f140fa-87d3-43a7-9d1e-c30c14704516",
"client-request-id": "22f140fa-87d3-43a7-9d1e-c30c14704516"
}
}
}
This seems to conflict with your statement that “MS Graph Explorer, initially connects to a sample tenant allowing you to experiment with various MS Graph APIs without affecting real data. However, signing in allows you to interact with your actual tenant's data.” Please clarify the situation. I am doing a video on the topic , if you are on MS CorpNet and able to review please email me. I have a v- account and my name is Terry Clancy.

Thanks very much for your ongoing help with this

Terry Clancy
ClanceZ

@microsoft-github-policy-service microsoft-github-policy-service bot added Needs: Attention 👋 Author has responded to the issue and removed Needs: Author Feedback labels Nov 22, 2024
@ElinorW ElinorW removed the Needs: Attention 👋 Author has responded to the issue label Nov 27, 2024
@ElinorW
Copy link
Collaborator

ElinorW commented Nov 27, 2024

Hey @terryclancy ,
When you use MS Graph Explorer without logging on, it uses Delegated Access and this is because there's a sample tenant that's kind of signed in and that's the data that's fetched when you run a query like GET /me

As for the failed request, the sample tenant can only query data for common Microsoft services in a controlled environment, like users, groups, and other directory resources. This is because it has a limited set of permissions consented, which are used to demonstrate basic API functionality.

Copy link
Contributor

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 4 days. It will be closed if no further activity occurs within 3 days of this comment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants