[BUG] Insufficient permissions getting users for Microsoft Outlook integration

[TomHartogs-Neople]

Describe the bug
The Microsoft Outlook integration does not have sufficient permissions to be allowed to retrieve a list of users.
This list is retrieved as options for the newly added userId field, which is required when trying to access a shared mailbox.
These values fail to be retrieved.

To Reproduce
Steps to reproduce the behavior:

1. Go to: https://pipedream.com/connect/demo?app=microsoft_outlook&component=microsoft_outlook-find-shared-folder-email&tab=debug
2. Click on 'Connect Microsoft Outlook'
3. Authorize Pipedream to connect
4. Observe how the "User Id" field fails to be populated (bad options response for prop: userId)
5. The configureComponent debug SDK log contains more details

Expected behavior
UserId's would be populated with a list of user ids that are available for the authenticated user.

Screenshots

Additional context
Functionality was added in the following PR: #18295

Relevant error message:

  error: {
    code: "UserError",
    message: "bad options response for prop: userId",
    ts: "2025-09-16T09:20:00.086Z",
    name: "UserError"
  },
  userError: true,
  errors: [
    "{"code":"UserError","message":"bad options response for prop: userId","ts":"2025-09-16T09:20:00.086Z","cellId":null,"stack":null,"$debug":null,"name":"UserError"}"
  ],
  observations: [
    {
      k: "console.log",
      msg: "export: debug - {
  "status": 403,
  "statusText": "Forbidden",
  "headers": {
    "cache-control": "no-cache",
    "transfer-encoding": "chunked",
    "content-type": "application/json",
    "vary": "Accept-Encoding",
    "strict-transport-security": "max-age=31536000",
    "request-id": "bd8e7a51-8e0a-4eb9-824b-c4485b828ff4",
    "client-request-id": "bd8e7a51-8e0a-4eb9-824b-c4485b828ff4",
    "x-ms-ags-diagnostic": "{\"ServerInfo\":{\"DataCenter\":\"East US\",\"Slice\":\"E\",\"Ring\":\"5\",\"ScaleUnit\":\"005\",\"RoleInstance\":\"MN1PEPF0000F542\"}}",
    "x-ms-resource-unit": "2",
    "date": "Tue, 16 Sep 2025 09:19:58 GMT"
  },
  "config": {
    "transitional": {
      "silentJSONParsing": true,
      "forcedJSONParsing": true,
      "clarifyTimeoutError": false
    },
    "adapter": [
      "xhr",
      "http",
      "fetch"
    ],
    "transformRequest": [
      null
    ],
    "transformResponse": [
      null
    ],
    "timeout": 0,
    "xsrfCookieName": "XSRF-TOKEN",
    "xsrfHeaderName": "X-XSRF-TOKEN",
    "maxContentLength": -1,
    "maxBodyLength": -1,
    "env": {},
    "headers": {
      "Accept": "application/json",
      "Content-Type": "application/json",
      "Authorization": "Bearer <redacted>",
      "User-Agent": "axios/1.11.0",
      "Accept-Encoding": "gzip, compress, deflate, br"
    },
    "url": "https://graph.microsoft.com/v1.0/users",
    "allowAbsoluteUrls": true,
    "method": "get"
  },
  "data": {
    "error": {
      "code": "Authorization_RequestDenied",
      "message": "Insufficient privileges to complete the operation.",
      "innerError": {
        "date": "2025-09-16T09:19:59",
        "request-id": "bd8e7a51-8e0a-4eb9-824b-c4485b828ff4",
        "client-request-id": "bd8e7a51-8e0a-4eb9-824b-c4485b828ff4"
      }
    }
  }
}

[michelle0927]

@TomHartogs-Neople, I haven't been able to reproduce this error. Is the Microsoft account connected to Pipedream in your Accounts tab? If so, does it show all the following scopes?

[TomHartogs-Neople]

@michelle0927 I had not setup an account explicitly but solely used the demo interface as described in the steps to reproduce. Following this flow, you should be able to reproduce.

I have just added my Microsoft Outlook account to the accounts tab. Permissions look like such:

It seems like the right permissions should be there, however, creating a workflow with this account results in a similar error:

[michelle0927]

Hi @TomHartogs-Neople, I'm not able to reproduce with the demo interface. Are you an administrator of the Microsoft account? Are you able to login and see the list of users from https://admin.microsoft.com/?

[vunguyenhung]

Hello @TomHartogs-Neople, we have just added a new scope to our Outlook integration. Would you mind trying again and let us know the result?

[vunguyenhung]

Hi everyone, all test cases are passed! Ready for release!

Test report
https://vunguyenhung.notion.site/BUG-Insufficient-permissions-getting-users-for-Microsoft-Outlook-integration-273bf548bb5e81c189edfe37e7b6d605