Small and medium business | Business Central, N...

Trying to send invoice via an API call... not authorized

(1) Share

Report

Posted on by Alan Shurey

I'm trying to automate sending invoices via the API by posting to the following URL:

https://api.businesscentral.dynamics.com/v1.0/{tenantId}/api/v2.0/companies({companyId})/salesInvoices({salesInvoiceId})/Microsoft.NAV.Send

This executes successfully and returns "204 No Content", however no email is produced.

When reviewing the "Job Queue Log Entries" I can see an error relating to the API call:

The error message says:

You are not authorized to access this resource: https://graph.microsoft.com/.default. Contact your system administrator.

I think the problem is that the App Registration does not have the correct permissions to send the email via the shared mailbox configured. I have granted several Microsoft.Graph permissions including Application.ReadWrite.All and Mail.Send and still have not had any success, which makes me think there could be a configuration in BC I need to do.

If anyone else has encountered this and come up with a solution please let me know? Thank you

Categories:

Dynamics 365 Business Central

I have the same question (0)

All responses (4)

Answers (0)

Suggested answer

Anthony Blake 2,926 Super User 2025 Season 2 on at

Like (0)

Report

Hi Alan,

Mail.Send & User.Read should be enough API permissions to send email from a shared mailbox, I set this scenario up this week, albeit from D365 Finance.

User.Read should be assigned by default, but make sure it hasn't been removed.

Also check that the API permissions are not awaiting administrator approval in Azure.

Anthony

Was this reply helpful? Yes No
Suggested answer

YUN ZHU 95,331 Super User 2025 Season 2 on at

Like (0)

Report

This looks like a permissions issue with OAuth authentication.

Please check your App Registration permissions.

Thanks

ZHU

Was this reply helpful? Yes No
Gerardo Rentería Ga... 25,213 Most Valuable Professional on at

Like (1)

Report

Hi, good day
I hope this can help you, and give you some hints.

Using OAuth to connect Business Central APIs and Web Service in Postman | Dynamics 365 Lab

Best Regards
Gerardo

Was this reply helpful? Yes No
Suggested answer

Alan Shurey 14 on at

Like (0)

Report

Thank you for the suggestions, however I found the app registration permissions were not the issue.

The call to the bound action (Microsoft.NAV.Send) was working correctly, however the email account bound to the sales invoice cannot handle the Application Registration as the user and the app permissions do not appear to be passed through to allow access to the mailbox. Instead of using Exchange I managed to configure an SMTP email account to go out via Sendgrid (which allows me to set a basic username and password).

The problem for me is that Exchange is locked down to MFA users so I cannot use basic authentication. Not sure if this is the best solution, however its worked for me so I'm happy.

Was this reply helpful? Yes No