title: azure ad b2c graph api permissions
body: <p>I have a question about accessing the Microsoft Graph Api once a user is logged in through Azure Ad B2C. I am trying to migrate my app to login through b2clogin.com instead of login.microsoft.com and mostly it works except I can no longer call the Microsoft Graph Api to get the logged in user profile.</p>
  
  <p>I have set up Postman as an Application in my B2C tenant and configured the api permissions with <a href="https://graph.microsoft.com/User.Read" rel="nofollow noreferrer">https://graph.microsoft.com/User.Read</a> but when I try to get a token with the <a href="https://graph.microsoft.com/User.Read" rel="nofollow noreferrer">https://graph.microsoft.com/User.Read</a> scope I get the following error</p>
  
  <blockquote>
    <p>AADB2C90205: This application does not have sufficient permissions against this web resource to perform the operation</p>
  </blockquote>
  
  <p>I am not sure what this error means but when I look at the signins for the user in the portal I see 3 signins. </p>
  
  <p>The first has a status of Interrupted with an Failure Reason of</p>
  
  <blockquote>
    <p>The application tried to perform a silent sign in and the user could not be silently signed in. The application needs to start an interactive flow giving users an option to sign in. Contact app owner.</p>
  </blockquote>
  
  <p>The second one has a status of Interrupted with an Failure Reason of</p>
  
  <blockquote>
    <p>Application X doesn't have permission to access application Y or the permission has been revoked. Or The user or administrator has not consented to use the application with ID X. Send an interactive authorization request for this user and resource. Or The user or administrator has not consented to use the application with ID X. Send an authorization request to your tenant admin to act on behalf of the App : Y for Resource : Z.</p>
  </blockquote>
  
  <p>The third one has a status of Success</p>
  
  <p>I have been looking through the documentation for days trying to figure this out.</p>
  
  <p>I am missing some configuration I need to access the Microsoft Graph Api for a B2C user? </p>