Postman

Perform Graph API tests with Postman

Download Postman from the official website, register an account and log in

Find "Open in Postman" on this Microsoft website

The usual auth method that works for us is ROPC (Fig 1)

1. Replace Organization from address bar to tenant ID

2. Input client_id or the application id

3. Input client_secret

4. Input account username and password

5. Hit Send

6. Copy the retrieved token

7. Go to jwt.io website and paste the token to test (Optional)

If the API scope is set to empty, then it will automatically grab whatever was granted to the app itself (Listing scope(s) explicitly will help to limit the scope of the application)

Fig 1