I am currently facing an issue with a requirement that was presented to me, and i would like to ask you guys on possible ways of solving it. The requirement is to enable External/Guest users to have the ability to add/remove users from their organization (other external accounts) into and out of some sharepoint groups or o365 groups.
As a first step, i created an SPFx app, deployed it on a SP Page in order to see if the External/Guest user can list user of the AAD by utilizing the Graph API endpoint
Unfortunately, i am getting 403 Forbidden exception on my External/Guest Account and it seems that there is no way around this exception.
I was thinking of keeping the solution as simple as possible and downsize it to the abovementioned SPFx app and that is why I am trying to access the Graph API with the Guest User's context.
Has anyone ever faced and overcame this kind of problem?