python - MS Graph - Application Only - Sending Emails from Shared Mailbox as Daemon - Stack Overflow

admin管理员组

文章数量:1346317

I am trying to build an app in Python which uses MS Graph to send emails from a shared mailbox, I've been focusing on the msgraph-sdk module. I need this app to run as a daemon process (no human interaction required), so figured the suitable auth-flow here is ClientSecretCredential - application rather than delegation.

The GraphServiceClient object in msgraph-sdk gives 2 avenues to work with self.me and self.users. My understanding is I need self.users for this specific case. I do not understand the required permissions that need to be set up for an application level credential to send mail from a shared inbox.

I have followed the tutorial @ .0&tabs=python

using credential flow example from .md

And get:

Error: ErrorAccessDenied Access is denied. Check credentials and try again.

There is a part of the tutorial above to get a token, which works as expected - but I think msgraph-sdk will handle that under the hood? Is this even possible with App-Only Creds, and sending from a Shared Mailbox? Any help appreciated, thanks!

I am trying to build an app in Python which uses MS Graph to send emails from a shared mailbox, I've been focusing on the msgraph-sdk module. I need this app to run as a daemon process (no human interaction required), so figured the suitable auth-flow here is ClientSecretCredential - application rather than delegation.

The GraphServiceClient object in msgraph-sdk gives 2 avenues to work with self.me and self.users. My understanding is I need self.users for this specific case. I do not understand the required permissions that need to be set up for an application level credential to send mail from a shared inbox.

I have followed the tutorial @ https://learn.microsoft/en-us/graph/api/user-sendmail?view=graph-rest-1.0&tabs=python

using credential flow example from https://github/microsoftgraph/msgraph-sdk-python/blob/main/docs/applications_samples.md

And get:

Error: ErrorAccessDenied Access is denied. Check credentials and try again.

There is a part of the tutorial above to get a token, which works as expected - but I think msgraph-sdk will handle that under the hood? Is this even possible with App-Only Creds, and sending from a Shared Mailbox? Any help appreciated, thanks!

• python
• oauth-2.0
• microsoft-graph-api

Share Improve this question Follow asked 2 days ago Kitster1Kitster1 1111 bronze badge

Add a comment  | 

1 Answer 1

Sorted by: Reset to default 0

You need to assign the Mail.Send Application permission that will give your ServicePrincipal the permissions to Send email. Being a shared mailbox doesn't have that much relevance as the SP will impersonate the mailbox owner so it should work as long as there is no scoping of the SP access https://learn.microsoft/en-us/graph/auth-limit-mailbox-access

本文标签： pythonMS GraphApplication OnlySending Emails from Shared Mailbox as DaemonStack Overflow