Dynamics Community Forum Thread Details

I am trying to send a sales invoice to my customer through the Business Central API with an email attachment of the invoice. This operation is handled entirely through the Business Central API; I am not making direct calls to the Microsoft Graph API. Despite having all necessary permissions configured in Azure AD, I am encountering an authorization error when attempting to send the email.

Problem Summary:

When I attempt to send an email with the invoice attachment using the Business Central API, I receive the following error:

You are not authorized to access this resource: https://graph.microsoft.com/.default. Contact your system administrator.

This error occurs only when trying to send the sales invoice via email. Other API calls, such as creating and sending electronic documents, work as expected.

Setup and Code Implementation:

Business Central Code:
I have written the following code in Business Central to send the sales invoice:

procedure SendInvoiceOIOUBL(jobNo: Text): Integer

var

SalesInvHeader: Record "Sales Invoice Header";

Customer: Record "Customer";

DocumentSendingProfile: Record "Document Sending Profile";

DocName: Text[150];

CustomerNo: Code[20];

RecordVariant: Variant;

CustomerFieldNo: Integer;

DocumentNoFieldNo: Integer;

ReportUsage: Enum "Report Selection Usage";

begin

// Set the report usage to "Sales - Invoice"

ReportUsage := ReportUsage::"S.Invoice";



SalesInvHeader.Reset();

// Find the latest posted Sales Invoice where External Document No. equals jobNo

SalesInvHeader.SetRange("External Document No.", jobNo);



if not SalesInvHeader.FindFirst() then

Error('No posted Sales Invoice found for job %1.', jobNo);



// Get the Bill-to Customer record

if not Customer.Get(SalesInvHeader."Bill-to Customer No.") then

Error('Customer %1 not found.', SalesInvHeader."Bill-to Customer No.");



// Get the Document Sending Profile

if not DocumentSendingProfile.Get(Customer."Document Sending Profile") then

Error('Document Sending Profile for customer %1 not found.', Customer."No.");



// Assign the SalesInvHeader record to the Variant variable

RecordVariant := SalesInvHeader;



// Send the electronic document (fails with email)

DocumentSendingProfile.Send(

ReportUsage.AsInteger(),

RecordVariant,

SalesInvHeader."No.",

CustomerNo,

DocName,

CustomerFieldNo,

DocumentNoFieldNo

);



exit(1); // Success

end;

Azure AD Permissions:

I have registered an app in Azure AD with all necessary permissions for Dynamics 365 Business Central and Microsoft Graph.
Permissions granted (with admin consent) include:
- Dynamics 365 Business Central: AdminCenter.ReadWrite.All, API.ReadWrite.All, Automation.ReadWrite.All, Financials.ReadWrite.All, user_impersonation.
- Microsoft Graph: Mail.Send, Mail.Read, Mail.ReadWrite, etc.

Issue:
The email sending fails only when trying to send invoices via the DocumentSendingProfile set to email. This call fails with the above error message, despite having the necessary Microsoft Graph permissions. All other Business Central API calls, including sending electronic documents, are functioning as expected.

Request:

Could you please advise on why this authorization error occurs specifically for email sending, and if there are additional configurations required for Business Central to use Microsoft Graph permissions indirectly?

I am looking for guidance on how to resolve this issue so that I can send sales invoices via email using Business Central’s API.

Thank you for your assistance in resolving this matter.

Categories:

Dynamics 365 Business Central