Microsoft

ErrorAccessDenied — Access is denied

Caller lacks permission or license.

Riposte solution

Microsoft Graph returned 403 Access Denied. This typically means the account's token lacks necessary permissions or the mailbox is inaccessible. Ensure the account was authorized with all required Graph scopes (e.g., Mail.ReadWrite for mail access). You may need to re-authenticate the user via /auth/sessions with the proper scopes and have them consent. If the user lacks a mailbox or license, no API call can fix that—notify the user or admin.

Quick facts

Provider: Microsoft
Endpoint / surface: Microsoft Graph
Status code: 403

Why it happens

[Missing delegated/app permission; Conditional Access block]

How to fix it

[Grant correct permissions & consent; satisfy CA policies]