403 unknownError when Accessing Group/User Notebooks via Microsoft Graph API

Kasturi Sharma 1 Reputation point
2024-12-20T15:55:00.38+00:00

Issue Summary: We are encountering a 403 unknownError when trying to access group notebooks via the Microsoft Graph API endpoint:

GET https://graph.microsoft.com/v1.0/groups/{group-id}/onenote/notebooks

This issue is tenant-wide and occurs across all groups. The group notebooks exist and are accessible through SharePoint, but API calls consistently fail. All other Graph calls work except this one.

Error Details:

  • HTTP Status Code: 403
  • Error Message: unknownError
  • Request ID: 29512668-e43c-4496-9a54-267d5f5978f5
  • Client Request ID: 8ecc8670-b0e1-4dff-91b8-79229e973290
  • Timestamp: 2024-12-12T16:04:11.0000000Z

Steps Taken to Troubleshoot:

  1. Verified permissions:
    • The application has all required Graph API permissions, including:
    • Notes.ReadWrite.All
    • Group.ReadWrite.All
    • Admin consent has been provided for these permissions.
  2. Confirmed that the group notebooks exist and are accessible via SharePoint.
  3. Tested API calls through Graph Explorer, which also resulted in the same error.
  4. Checked Conditional Access policies in Azure AD. No policies appear to explicitly block Graph API access or the App in general.
  5. Verified user roles in the group, ensuring they have the required access.

Request for Assistance:

  • Guidance on resolving this tenant-wide issue.
  • Confirmation if there are any backend configurations or service-level restrictions affecting OneNote Graph API in the tenant.
  • Steps to debug or escalate further if needed.

Thank you in advance for your assistance.

OneNote
OneNote
A family of Microsoft products that enable users to capture, organize, and reuse notes electronically.
220 questions
Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
12,664 questions
Office Development
Office Development
Office: A suite of Microsoft productivity software that supports common business tasks, including word processing, email, presentations, and data management and analysis.Development: The process of researching, productizing, and refining new or existing technologies.
4,107 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Yakun Huang-MSFT 8,505 Reputation points Microsoft Vendor
    2024-12-23T02:53:19.1833333+00:00

    Hello Kasturi Sharma,

    Thank you for reaching out to Microsoft Support!

    In response to your question, we have tested this endpoint, and the test results are shown below, and it works well.

    Screenshot 2024-12-23 024916

    The 403Forbidden error appears only when the user is not in the group that the user accesses. Please check whether your account is in the group.

    To check backend configurations or service level restrictions, please open a support ticket. In order to get help from the API Owner.

    Hope this helps.

    If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.