It's a long shot, but maybe someone figured it out.

Is it possible to make a request, or a bunch of requests, to gain access to SharePoint REST API if what I have is a Graph API access token? (Let's assume I can have any scopes and admin level user is giving permissions for the Graph authorization)

1 Answer 1



I understand you want to you access multiple resources but not want to prompt login window again. You can consider using following approaches:

  1. Refresh Token: one Access token can only access one resource, but refresh token is against with multiple resource. Refresh tokens are valid for all resources that your client has already been given consent to access - thus, a refresh token issued on a request for resource=https://graph.microsoft.com can be used to request a new access token for resource=https://contoso.com/api.
  2. On-Behalf-Of flow: The OAuth 2.0 On-Behalf-Of flow (OBO) serves the use case where an application invokes a service/web API, which in turn needs to call another service/web API. The idea is to propagate the delegated user identity and permissions through the request chain


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.