'Microsoft Graph Api User.Read.All Not granted for my domain

I am getting the following error or status Not granted for my domain. see the attached document
enter image description here Is this because my role is User?

I tried to find who is Azure AD Global Administrator?

I followed the following steps:

  1. Log into the Azure Portal (https://portal.azure.com).
  2. Click on Azure Active Directory
  3. Click on Roles and administrators
  4. Click on Global administrator
  5. Under Global administrator it says Microsoft Office 365 Portal

what does it mean?
How can I or someone else in organization become Global administrator?
I want API permissions->User.Read.All Not granted for mydomain

PS: My email is work email.

Update 1
My role is user
enter image description here

Update 2
Global administrator - Assignments say's Microsoft Office 365 Portal is my Admin. How to get these credentials?
enter image description here

azureazure-active-directoryoffice365microsoft-graph-api


Solution 1:[1]

Grant consent screenshot

I was similiarly frustrated here: it's very hard to spot, however you'll notice that the 'grant admin consent for -' is reset on every update to permissions.

Therefore: simply re-tick this and wait a few seconds for the warnings to disappear.

I too thought I was missing a step elsewhere, very misleading!

Solution 2:[2]

For User.Read.All permission you should have Admin Consent which a User cannot avail.

You should have either Global Admin or Application administrator credentials.

Permission Required:

enter image description here

Please refer to this official document Permission details

Admin Credentials:

enter image description here

For Admin credentials details refer to this document

Office 365 Admin Role Assignment:

enter image description here

Hope this will help. Let me know if you have any more concern.

Solution 3:[3]

Make sure that if you're the only one or just opened the account that you are an admin on Microsoft 365.

  1. You will need to add a TXT record in your DNS settings (F.e. Route53 - AWS) https://docs.microsoft.com/en-us/microsoft-365/admin/misc/become-the-admin?view=o365-worldwide

Once that is verified you will automatically be a global administrator and then you will have access to all admin features.

  1. Go back to Azure and then just click on the small hard to see in grey here:

enter image description here

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source
Solution 1
Solution 2
Solution 3 Tra

Related Questions