403 Forbidden Teams User Presence

[DSFlemming]

Hello, I'm trying to get a user's Teams Presence but not sure how to get around the 403 forbidden error.

I'm guessing the API permissions on the app registration are enough. I'm using Presence.Read and Presence.Read.All as that worked in the Graph Explorer. 

This is what the action looks like

Any hints or advice that could point me in the right direction would be helpful.

[lbendlin]

use https://jwt.io  to examine if your bearer token has the required scope.

[DSFlemming]

Thanks for the tip. I checked the token in there and couldn't see a scope section. That's probably the problem but not sure why?

When I check the token made by the graph explorer I can see the permissions scope: 

Could there be something wrong with my app registration?

[DSFlemming]

Small progress, I created a new app registration with api permissions Presence.ReadWrite.All. Now the token shows that a role:

But I still get a forbidden when I try to use it in a GET request.

[lbendlin]

Check if other scopes are required as well. Check all URLs.

[DSFlemming]

Thanks @lbendlin, I'll continue to work on this. What do you mean by "Check all URLs"?

[lbendlin]

The redirect URI, for example.