topic Re: Issues Implementing MS Graph Outlook VBO in Digital Exchange

Issues Implementing MS Graph Outlook VBO

RachelAbbott — Wed, 22 Feb 2023 15:38:07 GMT

We are attempting to implement the Microsoft Graph API for accessing a shared Outlook mailbox. Currently, I am attempting to use the List Messages action, and am getting the following error message (have tested other actions with a similar error): {"error":{"code":"InvalidAuthenticationToken","message":"Access token is empty.","innerError":{"date":"2023-02-22T15:07:56","request-id":"xxx","client-request-id":"xxx"}}}

However, we've confirmed that the authentication token is still active. We have the following API permissions set:

Mail.ReadWrite (Delegated)

Mail.ReadWrite.Shared (Delegated)

Mail.Send (Delegated)

Mail.Send.Shared (Delegated)

For the inputs, we're using the shared mailbox (full email address) as the mailbox ID.

Thank you in advance for any help you can provide.

Re: Issues Implementing MS Graph Outlook VBO

ewilson — Wed, 22 Feb 2023 21:34:51 GMT

@Rachel Abbott

This is likely because you have an older version of the Utility - HTTP VBO deployed in your environment. I'd suggest grabbing the latest version from the Digital Exchange and try again.

https://digitalexchange.blueprism.com/dx/entry/3439/solution/utility---http

Cheers,

Eric

Re: Issues Implementing MS Graph Outlook VBO

RachelAbbott — Thu, 23 Feb 2023 13:09:08 GMT

Thanks @ewilson

We're now getting a 403 (Forbidden) error; any recommendations on what might be causing that? Have you seen any limitations with others around configs/access for shared mailboxes using the VBO?

Re: Issues Implementing MS Graph Outlook VBO

ewilson — Thu, 23 Feb 2023 16:37:19 GMT

@Rachel Abbott

Are you using an Application Access token or a Delegated Access token? Have you verified that the Client ID you have has to proper mail permissions in Azure AD? For mail this would include either Mail.Read.Shared or Mail.ReadWrite.Shared for reading from the shared mailbox. You would also need Mail.Send.Shared if you intend to send email from the shared mailbox.

Here's a link to the Microsoft Graph permissions reference:

https://learn.microsoft.com/en-us/graph/permissions-reference#mail-permissions

Cheers,

Eric

Re: Issues Implementing MS Graph Outlook VBO

RachelAbbott — Thu, 23 Feb 2023 16:48:36 GMT

@ewilson

We're using a Delegated Access token and do have the Mail.ReadWrite.Shared and Mail.Send.Shared permissions configured.

Re: Issues Implementing MS Graph Outlook VBO

ewilson — Thu, 23 Feb 2023 17:16:40 GMT

@Rachel Abbott

Ok, so the digital worker is essentially working on behalf of someone as a delegate. Have you verified that the user account, to whom the digital worker is working on behalf of, has permissions on the shared mailbox?

Cheers,

Eric

Re: Issues Implementing MS Graph Outlook VBO

RachelAbbott — Thu, 23 Feb 2023 17:21:02 GMT

@ewilson

Yes, we've confirmed that the account has permissions to the shared mailbox. Thank you for your continued help with this - I appreciate it!

Re: Issues Implementing MS Graph Outlook VBO

RachelAbbott — Thu, 23 Feb 2023 17:32:50 GMT

@ewilson

Any chance the issue could be in the Manifest configurations? Would you be able to provide an example of what those should look like?

Re: Issues Implementing MS Graph Outlook VBO

ewilson — Thu, 23 Feb 2023 20:59:27 GMT

@Rachel Abbott

If you're trying to get a Delegated Access token you must pass in the Tenant ID, Client ID, Username, and Password. Do not pass in Client Secret because that automatically results in trying to get an Application Access token. The Username and Password are for the account your Digital Worker is trying to work on-behalf of. Also, I believe Delegated Access will require that you enable the Allow public client flows option within the Application Registration page for the Client ID you're using.

Here's an example of what that looks like in the Azure Admin page:

Cheers,

Eric

Re: Issues Implementing MS Graph Outlook VBO

RachelAbbott — Mon, 27 Feb 2023 14:21:28 GMT

Thanks, @ewilson . Ultimately, we decided to change configurations to Application level access with a Scope configured in the app registration to limit access to just the mailboxes needed. So far, everything seems to be working great now! Thank you so much for your help with this.

Re: Issues Implementing MS Graph Outlook VBO

RachelAbbott — Mon, 06 Mar 2023 14:39:04 GMT

@ewilson

One more question for you that's popped up as we've been implementing - when trying to use List Mail in Folder for both Sent Items and Inbox, we're receiving the following error:

This occurs both when using the actual folder ID and the folder names of 'inbox' and 'sentitems'. This isn't happening with other folders from what we've observed so far. It looks like this is related to the JSON to Messages stage. Any ideas/suggestions for resolution?

Thanks!

Rachel

Re: Issues Implementing MS Graph Outlook VBO

ewilson — Mon, 06 Mar 2023 17:16:47 GMT

Hi @Rachel Abbott

I've seen a similar issue in the past. Previously, this came down to an issue where an element in the raw JSON returned by Microsoft wasn't being properly initialized by Graph which resulted in a data type exception later on when an a later message had the same element and it was initialized properly based on it's type (eq. null vs false for a Boolean value).

I'll see if I can recreate the condition you're seeing. Can you give me some broad details about the messages you're listing? Is there anything special about them? Are their attachments, voting results, etc? Any sort of special Outlook features being used in these?

Cheers,

Eric

Re: Issues Implementing MS Graph Outlook VBO

RachelAbbott — Mon, 06 Mar 2023 17:33:43 GMT

Thanks so much, @ewilson !

Nothing special about the messages - we're passing the mailbox, folder ID (for both inbox and sentitems) and number of results per page. We would ultimately like to apply a search query by subject line content, but priority at the moment is getting the response to return as expected first.

Re: Issues Implementing MS Graph Outlook VBO

PhilipDeveau — Fri, 09 Jun 2023 14:19:44 GMT

we are also recieving the same error on "List Mail in Folder" page and the "JSON to Messages" code block throws : Unable to cast object of type 'Newtonsoft.Json.Linq.JValue' to type 'Newtonsoft.Json.Linq.JObject'.
looking at the raw json, the first entry for isDeliveryrecieptrequsted is :NUll so the column is still setting the type to string, and the second mail item has this set to false.

if i only get 1 item its fine also we re-imported 1.3.1 to see if maybe it was corrupt but seems like the fix isnt working

Re: Issues Implementing MS Graph Outlook VBO

PhilipDeveau — Fri, 09 Jun 2023 16:13:57 GMT

found the issue for me, the isDeliveryRequested i forced all nulls to false with a replace step, but noticed i was still getting it. this time for the Categories field. if first one is blank like "categories": [], and a second one is "categories": ["For Review"], i get the same mismatch error. i tested removing "For Review" and it processed both as a collection. if categories is filled in then there is an error.

Re: Issues Implementing MS Graph Outlook VBO

ewilson — Fri, 09 Jun 2023 18:20:45 GMT

@PhilipDeveau

It's unfortunate that Microsoft doesn't seem to understand how to properly initialize empty items in their JSON responses. 🤷‍♂️ We did add some code to handle the isDeliveryReceiptRequested issue. We can take a look and see if we can apply the same code change to the categories entry.

Cheers,

Eric

Re: Issues Implementing MS Graph Outlook VBO

PhilipDeveau — Fri, 09 Jun 2023 18:42:52 GMT

Thanks @ewilson

I made a temp workaround to do a regex replace on categories since its not something we currently need but an updated version would be better!

Re: Issues Implementing MS Graph Outlook VBO

faisal.reza — Thu, 11 Apr 2024 13:41:06 GMT

@ewilsonWanted to check if there was a solution to the categories issue yet? We're unable to read messages for the same reason above if categories exist.

Re: Issues Implementing MS Graph Outlook VBO

ewilson — Thu, 11 Apr 2024 14:47:16 GMT

Hello @faisal.reza

Unfortunately, there's been no change in the handling of categories yet. It is in our backlog though.

Cheers,

Eric

Re: Issues Implementing MS Graph Outlook VBO

ewilson — Thu, 11 Apr 2024 15:17:27 GMT

@faisal.reza I went back and reviewed changes to the VBO. This feature was actually introduced in the 1.3.2 release late last year. Are you using the latest release?