{"id":4606,"date":"2024-01-05T14:03:31","date_gmt":"2024-01-05T05:03:31","guid":{"rendered":"https:\/\/m365jp.xyz\/?p=4606"},"modified":"2024-01-05T14:07:30","modified_gmt":"2024-01-05T05:07:30","slug":"mc704030-app-only-user-readbasic-all-permission-is-now-available","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2024-01-05-mc704030-app-only-user-readbasic-all-permission-is-now-available","title":{"rendered":"MC704030 | App-Only User.ReadBasic.All Permission is now available"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC704030 | App-Only User.ReadBasic.All Permission is now available<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>stayInformed<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>01\/05\/2024 04:03:14<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>01\/05\/2024 04:02:57<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>02\/26\/2024 08:00:00<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<p>User.ReadBasic.All allows the app to retrieve basic user properties like ID, display name, first and last name, email address, and photo. Today only delegated User.ReadBasic.All is available. We heard customer feedback to enable app-only User.ReadBasic.All   permission as well, to limit their app access to only basic user properties.<\/p>\n<p>With the release of app-only User.ReadBasic.All, we also fixed a bug, which enabled the app to filter on properties it shouldn&#8217;t access with User.ReadBasic.All. The issue is now resolved, ensuring that apps with delegated permission can no longer filter   on unauthorized properties.&nbsp;<\/p>\n<p>If your app uses delegated User.ReadBasic.All to filter properties beyond its access, it will now encounter a 403 error message, indicating &#8220;insufficient privileges to complete the operation.&#8221; You can grant the app User.Read.All permission, to ensure the   filter operation succeeds.&nbsp;<\/p>\n<p>With app-only User.ReadBasic.All, you can evaluate the permission needs of apps in your tenant; for those requiring access to basic user properties only, consider granting User.ReadBasic.All permission instead of User.Read.All. &nbsp;<\/p>\n<p>[When this will happen:]  <\/p>\n<p>Standard Release: We will begin rolling out by mid-January 2024 and expect to complete by late January 2024.  <\/p>\n<p>[How this will affect your organization:]<\/p>\n<p>No action is required if applications are not filtering on user properties that it does not have access to with User.ReadBasic.All. However, if a customer\u2019s application needs the filter operation to succeed, they must grant the application User.Read.All   permission.   <\/p>\n<p>  <\/p>\n<p>  <\/p>\n<p>[What you need to do to prepare:]<\/p>\n<p>You may consider updating documentation as appropriate.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<p>User.ReadBasic.All \u3092\u4f7f\u7528\u3059\u308b\u3068\u3001\u30a2\u30d7\u30ea\u306f ID\u3001\u8868\u793a\u540d\u3001\u59d3\u540d\u3001\u30e1\u30fc\u30eb \u30a2\u30c9\u30ec\u30b9\u3001\u5199\u771f\u306a\u3069\u306e\u57fa\u672c\u7684\u306a\u30e6\u30fc\u30b6\u30fc \u30d7\u30ed\u30d1\u30c6\u30a3\u3092\u53d6\u5f97\u3067\u304d\u307e\u3059\u3002\u73fe\u5728\u3001\u30c7\u30ea\u30b2\u30fc\u30c8\u3055\u308c\u305fUser.ReadBasic.All\u306e\u307f\u3092\u4f7f\u7528\u3067\u304d\u307e\u3059\u3002\u30a2\u30d7\u30ea\u5c02\u7528\u306e User.ReadBasic.All \u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3082\u6709\u52b9\u306b\u3057\u3066\u3001\u30a2\u30d7\u30ea\u3078\u306e\u30a2\u30af\u30bb\u30b9\u3092\u57fa\u672c\u7684\u306a\u30e6\u30fc\u30b6\u30fc \u30d7\u30ed\u30d1\u30c6\u30a3\u306e\u307f\u306b\u5236\u9650\u3059\u308b\u3068\u3044\u3046\u304a\u5ba2\u69d8\u304b\u3089\u306e\u30d5\u30a3\u30fc\u30c9\u30d0\u30c3\u30af\u304c\u5bc4\u305b\u3089\u308c\u307e\u3057\u305f\u3002<\/p>\n<p>\u30a2\u30d7\u30ea\u5c02\u7528\u306e User.ReadBasic.All \u306e\u30ea\u30ea\u30fc\u30b9\u306b\u4f34\u3044\u3001\u30a2\u30d7\u30ea\u304c User.ReadBasic.All \u3067\u30a2\u30af\u30bb\u30b9\u3057\u3066\u306f\u306a\u3089\u306a\u3044\u30d7\u30ed\u30d1\u30c6\u30a3\u3092\u30d5\u30a3\u30eb\u30bf\u30fc\u51e6\u7406\u3067\u304d\u308b\u30d0\u30b0\u3082\u4fee\u6b63\u3057\u307e\u3057\u305f\u3002\u3053\u306e\u554f\u984c\u306f\u89e3\u6c7a\u3055\u308c\u3001\u59d4\u4efb\u3055\u308c\u305f\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u6301\u3064\u30a2\u30d7\u30ea\u306f\u3001\u627f\u8a8d\u3055\u308c\u3066\u3044\u306a\u3044\u30d7\u30ed\u30d1\u30c6\u30a3\u3067\u30d5\u30a3\u30eb\u30bf\u30fc\u51e6\u7406\u3067\u304d\u306a\u304f\u306a\u308a\u307e\u3059\u3002&nbsp;<\/p>\n<p>\u30a2\u30d7\u30ea\u3067\u59d4\u4efb\u3055\u308c\u305f User.ReadBasic.All \u3092\u4f7f\u7528\u3057\u3066\u3001\u30a2\u30af\u30bb\u30b9\u3067\u304d\u306a\u3044\u30d7\u30ed\u30d1\u30c6\u30a3\u3092\u30d5\u30a3\u30eb\u30bf\u30fc\u51e6\u7406\u3059\u308b\u3068\u3001&#8221;\u64cd\u4f5c\u3092\u5b8c\u4e86\u3059\u308b\u305f\u3081\u306e\u6a29\u9650\u304c\u4e0d\u5341\u5206\u3067\u3059&#8221; \u3053\u3068\u3092\u793a\u3059 403 \u30a8\u30e9\u30fc \u30e1\u30c3\u30bb\u30fc\u30b8\u304c\u8868\u793a\u3055\u308c\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002\u30a2\u30d7\u30ea\u306b User.Read.All \u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u4ed8\u4e0e\u3057\u3066\u3001\u30d5\u30a3\u30eb\u30bf\u30fc\u64cd\u4f5c\u304c\u6210\u529f\u3059\u308b\u3088\u3046\u306b\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002&nbsp;<\/p>\n<p>\u30a2\u30d7\u30ea\u5c02\u7528\u306e User.ReadBasic.All \u3092\u4f7f\u7528\u3059\u308b\u3068\u3001\u30c6\u30ca\u30f3\u30c8\u5185\u306e\u30a2\u30d7\u30ea\u306e\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u306e\u30cb\u30fc\u30ba\u3092\u8a55\u4fa1\u3067\u304d\u307e\u3059\u3002\u57fa\u672c\u7684\u306a\u30e6\u30fc\u30b6\u30fc \u30d7\u30ed\u30d1\u30c6\u30a3\u306e\u307f\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u5834\u5408\u306f\u3001User.Read.All \u3067\u306f\u306a\u304f User.ReadBasic.All \u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u4ed8\u4e0e\u3059\u308b\u3053\u3068\u3092\u691c\u8a0e\u3057\u3066\u304f\u3060\u3055\u3044\u3002 &nbsp;<\/p>\n<p>[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]  <\/p>\n<p>\u6a19\u6e96\u30ea\u30ea\u30fc\u30b9: 2024 \u5e74 1 \u6708\u4e2d\u65ec\u307e\u3067\u306b\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u3092\u958b\u59cb\u3057\u30012024 \u5e74 1 \u6708\u4e0b\u65ec\u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002  <\/p>\n<p>[\u3053\u308c\u304c\u7d44\u7e54\u306b\u53ca\u307c\u3059\u5f71\u97ff:]<\/p>\n<p>\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u304c User.ReadBasic.All \u3092\u4f7f\u7528\u3057\u3066\u30a2\u30af\u30bb\u30b9\u3067\u304d\u306a\u3044\u30e6\u30fc\u30b6\u30fc \u30d7\u30ed\u30d1\u30c6\u30a3\u3092\u30d5\u30a3\u30eb\u30bf\u30fc\u51e6\u7406\u3057\u3066\u3044\u306a\u3044\u5834\u5408\u3001\u30a2\u30af\u30b7\u30e7\u30f3\u306f\u5fc5\u8981\u3042\u308a\u307e\u305b\u3093\u3002\u305f\u3060\u3057\u3001\u9867\u5ba2\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3067\u30d5\u30a3\u30eb\u30bf\u30fc\u64cd\u4f5c\u3092\u6210\u529f\u3055\u305b\u308b\u5fc5\u8981\u304c\u3042\u308b\u5834\u5408\u306f\u3001\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b User.Read.All \u30a2\u30af\u30bb\u30b9\u8a31\u53ef\u3092\u4ed8\u4e0e\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n<p>  <\/p>\n<p>  <\/p>\n<p>[\u6e96\u5099\u306b\u5fc5\u8981\u306a\u3053\u3068:]<\/p>\n<p>\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u3001\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u306e\u66f4\u65b0\u3092\u691c\u8a0e\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC704030 | App-Only User.ReadBasic.All Permission is now available Classification stayInformed Last Updated 01 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4606","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/4606","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=4606"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/4606\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=4606"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=4606"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=4606"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}