Known issues
What Microsoft lists as broken, worked around, or changing in a way that breaks things: Windows release health, Office, Microsoft Graph, SQL Server and Exchange Server updates, and the identity platform. Status is shown as Microsoft publishes it, and ChangeIntel notes when Microsoft revises an entry.
Microsoft Graph
source checked todayAs per RFC 3986 and as described in Encoding query parameters, reserved characters in query strings must be percent-encoded. For example, the syntax for $search on a group name like "Hiking&Recreation" is as follows: GET…
Reading and updating a user's profile photo is only possible if the user has a mailbox. Failure to read or update a photo, in this case, results in the following error: { "error": { "code": "ErrorNonExistentMailbox", "message": "The SMTP…
Accessing and updating deployment audiences on deployment resources created via Intune is not currently supported. Listing deployment audience members and listing deployment audience exclusions returns 404 Not Found. Updating deployment…
The getAllRecordings API does not return recordings for meetings that don't have transcription enabled.
During a planned service update that is expected to be completed by August 31, 2026, paginated requests to the getAllRecordings or getAllTranscripts APIs may experience an automatic pagination token reset. A request can return a 200 OK…
When you call the getAllRecordings or getAllTranscripts APIs, passing the $top filter might not return the @odata.nextLink, even when there are more items to export. Workaround Do not pass $top query parameter until the issue is fixed.
The getAllTranscripts API might return transcript content URLs for some meetings that don't have any transcribed words. Calls to the content URL for those meetings will return an error. Workaround Verify that the meeting has been…
Cloud solution provider (CSP) apps must acquire tokens from the Azure AD (v1) endpoints to successfully call Microsoft Graph in their partner-managed customers. Currently, acquiring a token through the newer Azure AD v2.0 endpoint isn't…
In the callRecord participant resource, application/bot participants are currently represented by the communicationsUserIdentity instead of communicationsApplicationIdentity. Workaround Use the user agent headerValue on the…
Change tracking (/delta) requests to getAllTranscripts or getAllRecordings might return items that were already synced in earlier requests. This happens when the meeting had other non-related updates, such as adding participants, notes…
The claimsMappingPolicy API might require consent to both the Policy.Read.All and Policy.ReadWrite.ConditionalAccess permissions for the LIST /policies/claimsMappingPolicies and GET /policies/claimsMappingPolicies/{id} methods, as…
When you call the clone team method, if the source team contains more than one owner, only one owner is preserved in the cloned team. The other owners become members of the new cloned team. It is not possible to choose or configure which…
When the same application or user is joining the same meeting using multiple endpoints, and the roster notification mode is delta roster, the participant roster updates provided by Communications SDK might not capture the additional…
The release of the KBs introduced an issue with applications developed with the Communication Calling SDKs. The Microsoft Graph AnswerAsync method throws an exception when the bot tries to answer incoming calls. This is related to the…
When recording bot applications enable Bot Grouping, the number of participants shown by the Teams client as being recorded isn't accurate. Because the participants are grouped, the displayed number of participants being recorded is lower…
The conditionalAccessPolicy API currently requires consent to the Policy.Read.All permission to call the POST and PATCH methods. In the future, the Policy.ReadWrite.ConditionalAccess permission will enable you to read policies from the…
The Create internalDomainFederation, Update internalDomainFederation, and Delete internalDomainFederation might require you to grant consent to the Directory.AccessAsUser.All permission. This requirement is a temporary workaround till we…
When you create a channel, if you use special characters in your channel name, the Get filesFolder API will return a 400 Bad Request error response. When you create a channel, make sure that the displayName for the channel does not…
When you use Microsoft Graph APIs to create an external connection with a broken adaptive card for the result layout, the first call fails with a 503 Service Unavailable error. Then the second call fails with 409 Conflict error that…
When you make /delta calls to the messages API using immutable Ids in some cases (for example when a message moves out of a folder and is then moved back in), you might miss some change notifications.
An app with delegated permissions returns HTTP 403 Forbidden when attempting to attach large files to an Outlook message or event that is in a shared or delegated mailbox. With delegated permissions, createUploadSession succeeds only if…
Getting the list of bookingBusinesses fails with the following error code when an organization has several Bookings businesses and the account making the request is not an administrator: { "error": { "code": "ErrorExceededFindCountLimit"…
To use the FIDO2 provisioning API (Create fido2AuthenticationMethod), administrators must enable Allow self-service setup in the FIDO2 authentication method policy. In v1.0, this setting also enables end-user FIDO2 registration through My…
When querying followed sites through Microsoft Graph, the response might have incorrect results and those results might not match the results from following content in SharePoint. Workaround Use the following people and content REST API.
The List group members API operation on the v1.0 endpoint currently doesn't return any service principals that might be members of the queried group. Workaround As a workaround, use one of the following options: Use the List group members…
This API works differently in one or more national clouds. For details, see Implementation differences in national clouds. When $expand=members is included, this API returns a maximum of 25 items, even if a larger $top value is specified.
The layoutType property returns null when listing all channels. To get the layout type of a specific channel, use the Get channel API.
When a newly created tenant sends a list members of team request using advanced Azure AD query capabilities, an HTTP 401 error occurs. Workaround Call the list teams API and wait for a few seconds. Call /teams/{id}/members and check for a…
In some edge cases, a request to list participants_v2 for a callRecord might return an incomplete list. Workaround You can utilize the existing participants property of a callRecord for a complete list of participants.
When a nonadmin user calls the Create group API, Update group API, or Upsert group API and adds their user ID in the request body in the [email protected] collection, the request fails with a 400 Bad Request error code with the message…
Microsoft's Graph page is an undated catalog: an entry can be years old and still apply.