trim skiff
Hello, I am trying to create a piece of code in Python using msgraph beta sdk that:
- subscribes to a calendar in Microsoft Teams
- when a new calendar event is created, i fetch it using get_by_id
- extracts the web join url from the Event object
- subscribes to the online meeting change notifications using the web join url
- sends the notification sent to the webhook i defined in the subscriptions to another service.
let’s call the calendar owner: “monitored user”
all the steps I described above I implemented successfully using Microsoft docs
but I have reached an edge case where an external user invites the monitored user to a call (meaning the online meeting does not belong to the monitored user’s calendar)
when my code attempts to subscribe to this online meeting, I receive “unauthorized” as a response.
the tenant which the monitored user belongs to, gave me application type permissions beforehand (OnlineMeetings.ReadAll), and that enables me to subscribe to online meetings created under their tenant.
but that is not the case for online meetings that were created under another tenant.
still, my monitored users are able to join externally created online meetings they were invited to, meaning the permission exists for the said user but not for the application.
I wanted to ask if it’s possible through some permission trick (delegated maybe), to enable my application to subscribe to resources (online meetings in this case) that were created outside of the tenant my application has access to?
I have tried experimenting with delegated permissions, oauth2grantpermissions and more but I confused myself to a point where I don’t understand it anymore.
I would love to know if my case is solvable,
thank you very much