You are building a web application that signs in users with their Microsoft work accounts and reads their calendar events from Microsoft Graph. During sign-in, you need to request permission to read calendars. Which OAuth 2.0 flow and permission type is correct for a server-side web app?

Question

Sunny · Accepted Answer

Authorization Code flow with Delegated permission 'Calendars.Read'. Authorization Code flow is the recommended flow for server-side web apps. Delegated permissions act on behalf of the signed-in user, so 'Calendars.Read' grants the app access to that specific user's calendar only. Client Credentials with Application permissions would give access to all users' calendars — inappropriate here.

You are building a web application that signs in users with their Microsoft work accounts and reads their calendar events from Microsoft Graph. During sign-in, you need to request permission to read calendars. Which OAuth 2.0 flow and permission type is correct for a server-side web app?

You are building a web application that signs in users with their Microsoft work accounts and reads their calendar events from Microsoft Graph. During sign-in, you need to request permission to read calendars. Which OAuth 2.0 flow and permission type is correct for a server-side web app?

📚 What This Question Tests

More Microsoft Graph Practice Questions