Outlook Add-in - Mac new UI - 7000 error - permission denied while Office.SensitivityLabelsCatalog interface is supported

[xxronis]

Provide required information needed to triage your issue

While Office.context.sensitivityLabelsCatalog.getIsEnabledAsync() (and more Labels API calls) are supported for the Requirements Set (1.13) and Outlook mac versions (16.91.x +) , they fail for some users in Mac new Outlook UI desktop client with error message:

"You don't have sufficient permissions for this action", error code 7000.

While the docs say something totally different for 7000, I read that this 7000 means that client may not support this operation although that does not make sense according to Requirements and client versions.

Also for many users it succeeds, also from OWA or windows client.

The manifest permissions are highest ReadWriteMailbox

Is there any other Exchange/AZ permissions/group/role/policy around labels we should look into or this is a bug?

Thanks!

Your Environment

• Platform [PC desktop, Mac, iOS, Office on the web]: Mac
• Host [Excel, Word, PowerPoint, etc.]: Outlook
• Office version number: 16.91
• Operating System: MacOS
• Browser (if using Office on the web): ______
• GCCH tenant

Expected behavior

Checks for Enabled Labels Catalog and item label should succeed

Current behavior

Sometimes (quite a lot of times) error 7000, You don't have sufficient permissions for this action

Steps to reproduce

1. ItemSend event triggered addin
2. Call Office.context.sensitivityLabelsCatalog.getIsEnabledAsync() or Office.context.sensitivityLabelsCatalog.getAsync()

Context

We have to note we test this in GCCh env

Depending on the email item label we must perform other validation operations.
This blocks the addin functionality.

Useful logs

• Console errors
• Screenshots
• Test file (if only happens on a particular file)

Thank you for taking the time to report an issue. Our triage team will respond to you in less than 72 hours. Normally, response time is <10 hours Monday through Friday. We do not triage on weekends.

[github-actions]

Here are some similar issues that might help you. Please check if they can solve your problem.

• Office.context.mailbox.item.sensitivityLabel.getAsync doesn't give correct GUID format for MAC Outlook thick client in New Outlook mode #4534

Powered by issue-sentinel

[xxronis]

Note: we have faced the mentioned "similar" GUID issue (not really related I believe) and created special platform condition to overcome it :/

[neprasad-microsoft]

Hi @xxronis
Can you help us with some information -

Can you check if requirementSet 1.13 is supported on your client - https://github.com/OfficeDev/office-js/wiki/Collecting-log-files-for-Outlook-Add%E2%80%90ins-issues

Is this happening only on Mac or Outlook Web and Windows also?
Are other APIs working for you on Mac?
Is the sensitivity option available in the UI in Outlook (not via add-in)?
Can you collect logs and share the diagnostic ID here - https://github.com/OfficeDev/office-js/wiki/Collecting-log-files-for-Outlook-Add%E2%80%90ins-issues
If possible, please share your add-in.

[xxronis]

Hi @neprasad-microsoft!

This happens on Mac Outlook new UI thick client.
Yes, other APIs do work, labels also work but with many many 7000 failures for some users.
Yes, sensitivity options are available form outlook UI.

I will come back with the diagnostic data, thanks

[neprasad-microsoft]

@xxronis
Please also check this on the clients where you get 7000 error - Can you check if requirementSet 1.13 is supported on your client - https://github.com/OfficeDev/office-js/wiki/Collecting-log-files-for-Outlook-Add%E2%80%90ins-issues