microsoftgraph / microsoftgraph/msgraph-sdk-java
Owners not assigned correctly in bulk member add & inconsistent response behavior
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 444
- Forks
- 154
- Avg merge
- 18h 28m
- Merged PRs (30d)
- 4
Description
Describe the bug
When creating a Team and adding members using the Microsoft Graph SDK for Java, there are two issues:
- Bulk add does not correctly assign owner roles
When using the bulk member add endpoint (/teams/{id}/members/add), users specified with the role "owner" are not assigned as owners.
Instead, they are added as regular members, even though the request payload explicitly defines the owner role.
This behavior occurs without any error or exception, making it difficult to detect programmatically. As a result, affected users do not receive the required owner permissions.
- createTeam does not return the created Team
The SDK method used to create a Team suggests that a Team object will be returned. However, the response does not contain the created Team resource.
Instead, the Team ID must be retrieved indirectly (e.g., via response headers or additional handling), which is not aligned with common framework expectations.
Expected behavior
-
Correct role assignment in bulk add
When adding members via the bulk endpoint, the roles provided in the request (e.g., "owner") should be correctly applied.
Users specified as owners must be assigned owner permissions within the Team. -
Ability to define members and roles during Team creation
It should be possible to fully define all desired members and their roles (including owners) directly during Team creation, without requiring a separate bulk add step. -
Consistent and intuitive SDK response behavior
The createTeam operation should either:
- return the created Team entity, or
- clearly reflect (through API design and SDK behavior) that no resource is returned.
Ideally, the SDK should align with common framework standards and not imply a return value that is not actually provided.
How to reproduce
Create Team
POST https://graph.microsoft.com/v1.0/teams
Content-Type: application/json
{
"template@odata.bind": "https://graph.microsoft.com/v1.0/teamsTemplates('standard')",
"displayName": "Test Team",
"members": [
{
"@odata.type": "#microsoft.graph.aadUserConversationMember",
"roles": ["owner"],
"user@odata.bind": "https://graph.microsoft.com/v1.0/users('john.doe@xy.com')"
}
]
}
Retrieve Team ID
The Team ID is extracted from the response (e.g., via response headers / response options).
Bulk add members
POST https://graph.microsoft.com/v1.0/teams/{team-id}/members/add
Content-Type: application/json
{
"values": [
{
"@odata.type": "microsoft.graph.aadUserConversationMember",
"roles": [],
"user@odata.bind": "https://graph.microsoft.com/v1.0/users('some.user@xy.com')"
},
{
"@odata.type": "microsoft.graph.aadUserConversationMember",
"roles": [],
"user@odata.bind": "https://graph.microsoft.com/v1.0/users('the.user@xy.com')"
},
{
"@odata.type": "microsoft.graph.aadUserConversationMember",
"roles": [],
"user@odata.bind": "https://graph.microsoft.com/v1.0/users('john.smith@xy.com')"
},
{
"@odata.type": "microsoft.graph.aadUserConversationMember",
"roles": ["owner"],
"user@odata.bind": "https://graph.microsoft.com/v1.0/users('one.owner@xy.com')"
},
{
"@odata.type": "microsoft.graph.aadUserConversationMember",
"roles": ["owner"],
"user@odata.bind": "https://graph.microsoft.com/v1.0/users('another.owner@xy.com')"
}
]
}
SDK Version
6.62.0
Latest version known to work for scenario above?
No response
Known Workarounds
No response
Debug output
The log contains no errors, which is also a real problem.
Configuration
- OS: Windows Local and a Debian on the production VM but the behavior is on both systems the same
-Within a permission management workflow implemented in a Spring Boot 3.5.x application, Teams are programmatically created and populated in a Job with members using the Microsoft Graph SDK for Java.
Other information
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the SDK entry points for createTeam and /teams/{id}/members/add, using the reproduction requests and response headers as the baseline. Compare the owner-role handling and create response with Microsoft Graph behavior, then establish whether each discrepancy belongs to the SDK or the service. Done means both reported behaviors have a confirmed, testable fix scope.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring-boot
- Domain
- api, backend
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100