Not able to download meeting transcript from app

Question

Not able to download meeting transcript from app

Dhruvin Mashruwala 0

I have an application and I want to download microsoft teams meeting transcript from that script. I have added required role to App registration but still getting authentication error.

Code.


credential = ClientSecretCredential(
    tenant_id=TENANT_ID,
    client_id=CLIENT_ID,
    client_secret=CLIENT_SECRET
)

graph_client = GraphServiceClient(credentials=credential, scopes=['https://graph.microsoft.com/.default'])

async def list_transcripts(user_id, meeting_id):
    transcripts = await graph_client.users.by_user_id(user_id).online_meetings.by_online_meeting_id(meeting_id).transcripts.get()
    return transcripts.value

async def download_transcript(user_id, meeting_id, transcript_id, output_path):
    from msgraph.generated.users.item.online_meetings.item.transcripts.item.content.content_request_builder import ContentRequestBuilder
    config = ContentRequestBuilder.ContentRequestBuilderGetRequestConfiguration()
    config.headers.add('Prefer', 'Content-Type="text/vtt"')

    content = await graph_client.users.by_user_id(user_id)\
        .online_meetings.by_online_meeting_id(meeting_id)\
        .transcripts.by_call_transcript_id(transcript_id)\
        .content.get(config)

    with open(output_path, 'wb') as f:
        f.write(content)
    print(f"✅ Transcript saved to: {output_path}")

Permissions

PII hidden

Error:

APIError

    Code: 403

    message: None

    error: MainError(additional_data={}, code='Forbidden', details=None, inner_error=InnerError(additional_data={}, client_request_id='96fcb1cf-02c5-45f5-963d-2d07a0febeaf', date=datetime.datetime(2025, 8, 7, 7, 32, 56), odata_type=None, request_id='6c25163e-fa70-4c91-8052-407d53482693'), message="Application is not allowed to perform operations on the user 'PII hidden', neither is allowed access through RSC permission evaluation.", target=None)

Prasad-MSFT 9,331 Reputation points Microsoft External Staff Moderator

2025-08-07T09:26:21.58+00:00

Hi Dhruvin Mashruwala, thanks for raising your issue. Could you please provide more details or clarify the issue you are experiencing such as detailed description of the steps you took to encounter the issue and any specific documentation or guide you were following? Which authentication error you are getting?
Dhruvin Mashruwala 0 Reputation points

2025-08-07T11:32:55.8+00:00

Edited the original question
Prasad-MSFT 9,331 Reputation points Microsoft External Staff Moderator

2025-08-08T12:55:02.02+00:00

The error message indicates, even if you've added the required Graph API permissions (like OnlineMeetingTranscript.Read.Chat), application identity requires an explicit policy to access user data.

To use application permission for this API, tenant administrators must create an application access policy and grant it to a user. It authorizes the app configured in the policy to fetch online meetings and/or online meeting artifacts on behalf of that user (with the user ID specified in the request path).
For more information, see Allow applications to access online meetings on behalf of a user.

1 answer

Your answer

Prasad-MSFT 9,331 Reputation points Microsoft External Staff Moderator

2025-08-07T09:26:21.58+00:00

Hi Dhruvin Mashruwala, thanks for raising your issue. Could you please provide more details or clarify the issue you are experiencing such as detailed description of the steps you took to encounter the issue and any specific documentation or guide you were following? Which authentication error you are getting?
Dhruvin Mashruwala 0 Reputation points

2025-08-07T11:32:55.8+00:00

Edited the original question
Prasad-MSFT 9,331 Reputation points Microsoft External Staff Moderator

2025-08-08T12:55:02.02+00:00

The error message indicates, even if you've added the required Graph API permissions (like OnlineMeetingTranscript.Read.Chat), application identity requires an explicit policy to access user data.

To use application permission for this API, tenant administrators must create an application access policy and grant it to a user. It authorizes the app configured in the policy to fetch online meetings and/or online meeting artifacts on behalf of that user (with the user ID specified in the request path).
For more information, see Allow applications to access online meetings on behalf of a user.

Answer 1

Steven-N 5,485 Microsoft External Staff Moderator

Hi Dhruvin Mashruwala

Thanks for reaching out to Microsoft Q&A forum support

Based on your description, I understand that you're attempting to download Microsoft Teams meeting transcripts using an application registered in Azure Active Directory. You've already assigned the necessary roles to the app registration, but you're encountering an authentication error during the process.

However, to better understand the issue you're experiencing, please provide the following additional information. These details will help us offer the most accurate and effective solution:

What type of authentication are you using (app-only or delegated)?
Have you granted admin consent for all the required Microsoft Graph API permissions?
Are the transcripts stored in OneDrive for Business or SharePoint?
What is the exact error message you're receiving (e.g., invalid_client, unauthorized, access denied)?

We are looking forward to hearing from you

Dhruvin Mashruwala 0 Reputation points

2025-08-07T11:33:03.4566667+00:00

Edited the original question
Steven-N 5,485 Reputation points Microsoft External Staff Moderator

2025-08-08T14:07:00.1833333+00:00
Hi Dhruvin Mashruwala

Thanks for response

Based on the additional information you provided, I have a few assumptions about the possible cause of the issue, along with some suggested workarounds you might consider

Because your code and the screenshot, from my perspective view, the most possibility cause of your 403 Forbidden is that your app does not have an Application Access Policy (AAP) assigned to the target user (******@yourdomain.com) in that tenant.

In app‑only mode, permissions alone aren’t enough, Graph requires an AAP that explicitly authorizes your App ID to access online meetings on behalf of the user in your URL path. If neither an AAP nor a valid RSC grant applies, Graph returns the error text you’re seeing (mentions failing “through RSC permission evaluation”).

In my opinion, you can try creating an Application Access Policy for the target user and then reattempt the Graph API endpoint call to see if the issue is resolved.

Use the following PowerShell command to create the Application Access Policy

# Connect to Microsoft Teams PowerShell Connect-MicrosoftTeams # Variables $appId = "<YOUR-APP-ID>" # Replace with your Azure AD App (client) ID $userUpn = "<USER-UPN>" # Replace with the UPN of the user whose meetings you want to access $policyName = "TranscriptAccessPolicy" # Create the Application Access Policy New-CsApplicationAccessPolicy -Identity $policyName -AppIds $appId -Description "Allow this app to access online meetings and transcripts" # Assign the policy to the user Grant-CsApplicationAccessPolicy -Identity $userUpn -PolicyName $policyName # Optional: Verify the policy assignment Get-CsOnlineUser -Identity $userUpn | Select-Object DisplayName, ApplicationAccessPolicy

Notes:

Replace <YOUR-APP-ID> with your app registration’s Client ID.

Replace <USER-UPN> with the user’s email address (e.g., ******@domain.com).

Run this script as a Teams or Global Admin.

Wait for propagation, then retry your Graph call:

GET /users/{that-user}/onlineMeetings/{meetingId}/transcripts

Use the actual onlineMeeting.id from Graph, not the Teams join code.

Test with a recent meeting that still has a transcript

You can try the method above to see if it resolves the issue. If the problem persists, feel free to update us in the comment section.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Share via

Not able to download meeting transcript from app

1 answer

Your answer