No Application Access Policy Found for Graph API in MS Teams Virtual Events Integration

Hello Microsoft Community,

I’ve encountered an issue while integrating Microsoft Teams Virtual Events using Microsoft Graph API and would appreciate any guidance on how to resolve it.

Here’s the setup:

• I have registered an application in Microsoft Entra ID.
• The app is set up with application-level permissions:
  1. VirtualEvent.Read.All
  2. VirtualEventRegistration-Anon.ReadWrite.All
  3. I’ve configured an OAuth flow for users to authenticate with their Microsoft accounts and grant these permissions.
  4. After authentication, the user is redirected to our app, where we successfully fetch an application access token.
  5. The app is registered as a multi-tenant application.

     The issue:

     • We are using application permissions and receiving an access token correctly.
     • The Entra ID dashboard shows that the app has been granted the required permissions.
     • However, when using the Graph API to access virtual events (Teams webinars), I get the following error:

        

       bash

       Copy code

       GET: https://graph.microsoft.com/beta/solutions/virtualEvents/webinars/:id Response: { "error": { "code": "General", "message": "No application access policy found for the app (707b5896-7828-4010-834e-74d3201a3137) on the user (7f27a9fb-af1a-4d36-a102-3a9591e6aaf9).", "innerError": { "request-id": "00af9b4e-043c-4f93-8a02-a5ee14e7d29c", "date": "2024-10-02T09:10:26", "client-request-id": "00af9b4e-043c-4f93-8a02-a5ee14e7d29c" } } }

       Additional Details:

       • The app is meant to access data related to Microsoft 365 services (especially Teams).
       • We are using application permissions and not delegated permissions.
       • The app needs to work across multiple tenants.

         My question:

         • Do I need to configure additional application access policies for Microsoft Teams or Exchange Online to allow this app to access Teams-related data?
         • Should I use Exchange PowerShell to create this policy, given the data is related to Microsoft 365 services (like Teams webinars)?
         • Is there anything else I should verify for multi-tenant application permissions?

           Any insights or troubleshooting guidance would be much appreciated!

           Thank you!

           
           
           • 1. •