Hi Team,
We are hitting the graph api for getting the user details.
Since ours is a multi-tenant application, we created the token using client-credential flow with tenant value as common. But while hitting the graph api {https://graph.microsoft.com/v1.0/users/{upn}} am getting this error
{

"error": {

    "code": "Authorization_IdentityNotFound",

    "message": "The identity of the calling application could not be established.",

    "innerError": {

        "date": "2020-12-04T05:52:39",

        "request-id": "de5f8bd0-373a-4cac-93da-3bd4cb0a8442",

        "client-request-id": "de5f8bd0-373a-4cac-93da-3bd4cb0a8442"

    }

}

}

By default an Application should be able to read its own manifest, getting access to «requiredResourceAccess» (to know what permissions have been assigned to the application) and to «passwordCredentials» (to know the App secret expiration date).
This would be useful to let the customer know if there is a permission issue or that the App secret will expire soon.

Accept a date-time parameter in the graph request. Emails will be sent on that specific date-time

Option to recall the sent email as available in the outlook app

I would prefer to have one single API for everthing we do with Office 365, so it would be nice to be able to use the PowerBI API with the capabilities the Graph API gives us.

Converting to PDF using /content?format=pdf doesn't update toc entries or toc page number values before generating the PDF. It would be great if it could be made to do so.

It would be useful to have the option to update other fields as well.

It would be great if these options could also be used to update a docx file, in order to download as a docx (as opposed to pdf).

The usage reports need to include the user's department. When the global admin turns on the privacy setting to de-identify the user principal names and display names, there does not appear to be a way to then map the user back to their department and then there is no way to report totals at the department level. We can only have tenant level totals.

If we have the graph API access token for 2 users. Then a feature to move a message(email) from user1's folder to user2's folder should be possible.

This capability is available with ecp mailflow rules.

Being able to access and use the eDiscovery features in the Security & Compliance Center through the Graph API.

It's not currently possible to remove or delete a calendar entry from a calendar without sending out a cancellation to the attendees. This would be a nice feature to have

After I create a private channel with Graph Beta I had to manually click on the Files tab for the Team clients to create the SharePoint site. I would like to Graph Create Channel API to create the underlying SharePoint site as well.

Similar to the ability to interact with excel workbooks I would like to use Graph to modify remote Powerpoint files

There should be a report that give details of the versions of the Microsoft apps like Excel , PowerPoint being used by the user. Also in the usage obtained from getM365AppUserDetail report, last activity date for each of the apps should be shown instead of just combined activity date for OfficeSuite

In EWS it is possible to get more than 1 mail item by item ids. Can this be supported in Graph API? Graph API seems to allow fetching one message at a time via GET /me/messages/{id}.

Get total count of site collections

I think it should be possible to get data on who has joined a Teams meeting through the Graph API in "realtime".

A meeting created using this endpoint:
POST /users/{userId}/onlineMeetings/createOrGet

Should be able to be monitored so that we know that the right people actually have joined the meeting.

Currently Directory.ReadWrite.All is required for controlling Provisioning. This is hard sell to other admins if we only need a Create/Read/Update/Start/Stop Provisioning. Could a more focussed permission be created?

in One to One chat we want the following to happen:

• Message action should be able to copy to clipboard the message received,

• Also simultaneously should acknowledge the sender with some message without extra click or clicking on send button in the compose area.