Create a separate API for automatic replies
Currently, when working wth automatic replies, Graph requires read/write permissions on "mailboxSettings".
I would like to pose that while automatic replies make sense to logically group with outlook settings given where they are in the Outlook UI, from an API and permissions standpoint, this is a bit overkill. Now, any app I build that works with automatic replies needs to have an administrator's approval to be installed because of the high level of permissions it requires.
I suggest moving or creating an endpoint for automatic replies that is not tied to mailboxSettings, so that apps making use of it can ask for an appropriate level of isolated permissions.
Thank you for considering!
I agree fully. The automatic reply needs to be looked at. Once upon a time they were called "Out of Office Replies" and still in many companies this is how people use these replies, thus access to this information is needed. Currently it is as stated above total overkill for this property to be only accessible as an Application permission. In my company you can forget about asking for it. The answer without any assessment from IT is NO. Also considering that anyone with any email address can find out what a person auto reply is, it really needs to be looked at and moved out of settings. If I remember correctly when you asked for the presence/status of someone in Communicator (equivalent would be teams now) you would get a person's auto reply if turned on. Something like this should be implemented.