How to run this app only with my account permissions?

[ghost]

All I want is to send a Chat message. I know I have to authenticate in Microsoft 365 first but I don't see any way to do this without my administrator.

• my company has 2FA enabled so I can't use option "Log in using user name and password"
• when trying "default device code flow" or "browser authenticaton" admin's approval is required
• I can't register the application in Azure AD because I don't have any access to AAD at all

So my question is: How can I just send a Chat message without all this hustle? Can this app just log me in as I do this every day via browser and send a Chat message as I send every day using Teams web UI?

[waldekmastykarz]

Thanks for reaching out @javaDeveloperKid. Unfortunately, you can't just run this app without registering an AAD app with the necessary permissions and getting it approved by your tenant admin. That's just how auth works on the Microsoft cloud. If you can't register a custom AAD app in your org's AAD, you could register it in another AAD, but still your tenant admin would have to allow this app for use in the org tenant.

[ghost]

I understand. Thank you for your answer.

Can I ask you another question? I have to admit that all of this things like microsoft 365 login, microsoft graph, azure AD etc. is overwhelming for me. It's looks so big/advanced/hard. My experience with APIs has always been friendly, i.e. a service has a nice and understandable API docs, it also allows many authentication methods (e.g. my company has 2FA login to GitHub UI but I can still use GH API with token to authenticate) and I can work with this API right away.
On the other (Microsoft) hand, I had many approaches to start working with Microsoft APIs but every time I get lost in all of this docs, services etc.
Could you give me some advices, let's say to how write a simple script that sends a Chat Message? I just need any anchor point to start from.

[milanholemans]

My experience with APIs has always been friendly, i.e. a service has a nice and understandable API docs, it also allows many authentication methods (e.g. my company has 2FA login to GitHub UI but I can still use GH API with token to authenticate) and I can work with this API right away.

With CLI for Microsoft 365 you can also authenticate with MFA enabled, you should just use device code auth for this. The only difference is that modern auth in M365 requires always an Azure AD app to be registered where certain scopes are granted by the admin.

Could you give me some advices, let's say to how write a simple script that sends a Chat Message? I just need any anchor point to start from.

You could use Graph Explorer to test your Graph API requests, but that's just for testing requests actually. If you want to build a script to send a Teams chat message, you could use PnP.PowerShell maybe. They are still supporting legacy authentication where no app registration is needed, but this is legacy of course, you shouldn't really use it.
If you just want to build something that sends a Teams message, have you already looked into Power Automate? This is a Microsoft cloud workflow system where you can easily automate stuff (like sending a Teams message).