How to resolve Error message: Access to OData is disabled: [RAOP] : Blocked by tenant configured AppOnly AccessPolicy settings

The error message indicates that your application is being blocked by a tenant-configured Application Access Policy. This typically happens when the policy restricts access to certain resources or APIs for specific applications. Here's how you can resolve it:

1. Check Application Access Policy:

   • Use the Exchange Online PowerShell module to review the current Application Access Policies.

   • Run the following command to list the policies:

   • Identify if your application is being restricted by any policy.

2. Modify or Remove the Policy:

   • If the policy is unnecessarily restrictive, you can modify it to allow your application access.

   • Use the New-ApplicationAccessPolicy or Remove-ApplicationAccessPolicy cmdlets to adjust the settings. For example:

     

3. Verify Permissions:

   • Ensure that your application has the required permissions in Azure Active Directory. For example, if you're using Microsoft Graph API, verify that the necessary permissions (like Mail.Read, Calendars.Read, etc.) are granted.

4. Test the Application:

   • After making changes, test your application to confirm that the error is resolved.

Attachments (2)

69a689a4d3381.39359336810387.png
12.2 KB

69a689a4d3384.39359336811923.png
19.6 KB