FeatureFuel
1

Microsoft Graph API - Organization permissions

Source: outline/outline#8907 · opened by @nixent
Microsoft Entra Id SSO requires profile permissions to be able to read user data as well as Organization.DisplayName:
const teamName = organization.displayName; [L103](

In some Microsoft Entra Id configuration scenarios, User.Read permissions are not sufficient to fetch Organization.DisplayName, even though Microsoft documentation [states so]( As a result Microsoft Entra SSO fails with BadRequestError: Unable to load organization info from Microsoft Graph API: Insufficient privileges to complete the operation. Issue #7932 refers to the same error.
Assigning Organisation.Read.All permission helps to resolve the permissions issue but it requires Admin consent and also gives higher permissions than actually needed.

Since Organization.DisplayName is used just to display team name, suggest making it optional/allow blank or configurable via env variable.

No pledges yet. Be the first to back this.

Make a pledge

Pledge your monetary support if this feature is added.

$

Comments

No comments yet.

Replying to

Add a comment

What do you think about this feature request?


Similar requests