Skip to content

As verified, app permission is fine with invitation restriction now #9556

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
FaithOmbongi merged 4 commits into from
Jun 4, 2025
Merged

As verified, app permission is fine with invitation restriction now #9556

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
b120235
As verified, pp permission is fine with invitation restriction now
SiverShiSSS Apr 19, 2025
41b7493
Update invitation-post.md
SiverShiSSS Jun 4, 2025
3b0fca4
Merge pull request #1 from SiverShiSSS/SiverShiSSS-patch-1
SiverShiSSS Jun 4, 2025
e32915b
Update invitation-post.md - B2B invitations
FaithOmbongi Jun 4, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion api-reference/beta/api/invitation-post.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ Choose the permission or permissions marked as least privileged for this API. Us
> - Both nonadmin member users and guest users can invite guests if the tenant admin hasn't restricted the [default user permissions](/entra/fundamentals/users-default-permissions?toc=%2Fgraph%2Ftoc.json).
> - Guest Inviter, Directory Writers, or User Administrator.
> - To reset the redemption status: Helpdesk Administrator or User Administrator.
> - Application permissions (app-only) don't work if B2B invitations are disabled on the tenant or if B2B invitations are restricted to administrators.
> - Application permissions (app-only) don't work if B2B invitations are disabled on the tenant.
> - When resetting the redemption status for a guest user, the *User.ReadWrite.All* permission is the least privileged permission for the operation.

## HTTP request
Expand Down
2 changes: 1 addition & 1 deletion api-reference/v1.0/api/invitation-post.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ Choose the permission or permissions marked as least privileged for this API. Us
> - Both nonadmin member users and guest users can invite guests if the tenant admin hasn't restricted the [default user permissions](/entra/fundamentals/users-default-permissions?toc=%2Fgraph%2Ftoc.json).
> - Guest Inviter, Directory Writers, or User Administrator.
> - To reset the redemption status: Helpdesk Administrator or User Administrator.
> - Application permissions (app-only) don't work if B2B invitations are disabled on the tenant or if B2B invitations are restricted to administrators.
Copy link
Copy Markdown

@kyachi kyachi Jun 4, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @SiverShiSSS
How about rewriting it as follows?

  • These permissions don’t work if B2B invitations are disabled on the tenant.

After separate discussions with the Software Engineers, we confirmed that this statement diverges from the actual behavior. Specifically, we concluded that these permissions only fail when B2B invitations are disabled.

> - Application permissions (app-only) don't work if B2B invitations are disabled on the tenant.
> - When resetting the redemption status for a guest user, the *User.ReadWrite.All* permission is the least privileged permission for the operation.

## HTTP request
Expand Down
Loading