Skip to content

Different result returned based on access token #4001

@vinh-nguyen-dela

Description

@vinh-nguyen-dela

Describe the bug
Different results returned for the same query from Graph Explorer and direct HTTP query.

To Reproduce
Steps to reproduce the behavior:

  1. Go to Graph Explorer
  2. Query this: https://graph.microsoft.com/v1.0/users?$expand=transitiveMemberOf($select=id,displayName)&$select=id
  3. The result contains all users; the ones without transitive membership has "transitiveMemberOf": [ ], and has a "@odata.nextLink" field for paging.
  4. Query the same with an access token for a registered app (using curl or similar)
  5. The result now only contains users with non-empty "transitiveMemberOf", and no "@odata.nextLink" for paging.

Expected behavior
The result in both cases are the same.

Screenshots
None, security reason.

Desktop (please complete the following information):
Not related to the problem.

Additional context
Add any other context about the problem here.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions