January 28th, 2026
0 reactions

Introducing the Microsoft Graph User Configuration API (preview)

Weโ€™re excited to announce the public preview of the User Configuration API in the Microsoft Graph beta endpoint. The User Configuration API is a new set of endpoints that you can use to create, read, update, and delete user configuration objects in Exchange Online mail folders.ย ย User configuration objectsโ€”also known as folder associated items (FAIs)โ€”are items associated with a specific mail folder, and each configuration object in a folder must have a unique key. ย 

Many solutions need a reliable way to store and retrieve per-folder configuration data alongside mailbox contentโ€”whether thatโ€™s application state, settings, or other metadata scoped to a folder.ย ย Theย userConfigurationย resourceย supports multiple payload styles so you can store what best fits your scenario:ย 

  • binaryData: arbitrary binary dataย 
  • xmlData:ย serialized XMLย 
  • structuredData: key-value pairs of supported data typesย 

API capabilities

The beta release includes full CRUD support forย userConfigurationย objects:ย 

  • Createย a newย userConfigurationย 
  • Getย an existingย userConfigurationย 
  • Updateย an existingย userConfigurationย 
  • Deleteย aย userConfigurationย 

For example, you can read a configuration from either the signed-in user (/me) or a specific user (/users/{id}), scoped to a mail folder:ย 

  • GET /me/mailFolders/{mailFolderId}/userConfigurations/{userConfigurationId}
  • GETย /users/{usersId}/mailFolders/{mailFolderId}/userConfigurations/{userConfigurationId}

Permissions (least privileged)ย 

The API uses dedicated permissions for mailbox configuration items:ย 

  • Getย supportsย MailboxConfigItem.Readย (least privileged) andย MailboxConfigItem.ReadWriteย (higher privileged)ย 
  • Createย requiresย MailboxConfigItem.ReadWrite
  • Updateย requiresย MailboxConfigItem.ReadWriteย 
  • Delete requiresย MailboxConfigItem.ReadWriteย 

As always, choose theย least privileged permissionsย your application needs.ย 

Get startedย 

The easiest way to begin is to explore the API surface and try calls interactively.

Review the resource and method docs:ย 

Use Graph Explorer to test requests quickly:ย 

Weโ€™dย love your feedbackย 

As you explore theย User Configuration APIย in beta, we want to hearย whatโ€™sย working well and where we can improveโ€”especially around usability, gaps, and real-world scenarios.ย 

Send feedback to:ย exouserconfigurationapifeedback@microsoft.comย 

2 comments

Sort by :
  • Martin Machacek 2 minutes ago · Edited

    Could you share what are the well-known user configurations and for which mail folders? Like OWA.UserOptions.

  • Stuart Chapman 24 hours ago

    Are there any plans to add these new permissions (MailboxConfigItem.Read and MailboxConfigItem.ReadWrite) to Exchange RBAC for Application (see: https://learn.microsoft.com/en-us/exchange/permissions-exo/application-rbac) so that applications could be given scoped access to these APIs? Also, could these APIs be used to view/update/delete Microsoft created user configuration items, or will these APIs only work for user or third-party app created items? I am thinking of an approach similar to using MFCMAPI to delete corrupted system entries (e.g. rules or other FAI), which is sometimes necessary.