APIM set-variable error

Question

APIM set-variable error

Wael Horchani-TEN 40

Hello team,

I'm trying to add a member to a security group using microsoft graph, I'm calling it from APIM.

Below used code in APIM and it throw an error in line 14 (the set variable syntax)

The syntax is generated by Copilot, I totally new to this field. Please help.

User's image

Sridevi Machavarapu 5,885 Reputation points Volunteer Moderator

2025-06-04T02:02:55.3333333+00:00

Hello Wael Horchani-TEN,

The error Too many characters in character literal typically means there's a formatting issue or the value exceeds allowed limits in your set-variable line.

To assist further, please share the full policy code you're using so we can review it in context and help resolve the issue.

2 answers

Your answer

Sridevi Machavarapu 5,885 Reputation points Volunteer Moderator

2025-06-04T02:02:55.3333333+00:00

Hello Wael Horchani-TEN,

The error Too many characters in character literal typically means there's a formatting issue or the value exceeds allowed limits in your set-variable line.

To assist further, please share the full policy code you're using so we can review it in context and help resolve the issue.

Answer 1

Hi All,

Finally I setup working code, thank you very much for your help. you can check below full code for reference :

<policies>

<inbound>

<base />

<set-variable name="groupName" value="@(context.Request.OriginalUrl.Query.GetValueOrDefault("group_name"))" />

<!-- set-variable name="userEmail" value="@{

var userEmailValue = context.Request.Url.Query.GetValueOrDefault("user_email", "");

return userEmailValue;

}" / -->

<set-variable name="userEmail" value="@(context.Request.OriginalUrl.Query.GetValueOrDefault("user_email"))" />

<!--set-variable name="groupName" value="@(context.Request.MatchedParameters["group_name"])" />

<set-variable name="userEmail" value="@(context.Request.MatchedParameters["user_email"])" /-->

<send-request mode="new" response-variable-name="tokenResponse" timeout="20">

<set-url>https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/token</set-url>

<set-method>POST</set-method>

<set-header name="Content-Type" exists-action="override">

<value>application/x-www-form-urlencoded</value>

</set-header>

<set-body>@("client_id={client-id}&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&client_secret={client-secret}&grant_type=client_credentials")</set-body>

</send-request>

<set-variable name="access_token" value="@(((IResponse)context.Variables["tokenResponse"]).Body.As<JObject>()["access_token"].ToString())" />

<send-request mode="new" response-variable-name="groupResponse" timeout="20">

<set-url>@("https://graph.microsoft.com/v1.0/groups?$filter=displayName eq '" + context.Variables.GetValueOrDefault<string>("groupName") + "'")</set-url>

<set-method>GET</set-method>

<set-header name="Authorization" exists-action="override">

<value>@("Bearer " + context.Variables["access_token"])</value>

</set-header>

</send-request>

<set-variable name="groupId" value="@(((IResponse)context.Variables["groupResponse"]).Body.As<JObject>()["value"]?[0]?["id"])" />

<send-request mode="new" response-variable-name="userResponse" timeout="20">

<set-url>@("https://graph.microsoft.com/v1.0/users/" + context.Variables.GetValueOrDefault<string>("userEmail"))</set-url>

<set-method>GET</set-method>

<set-header name="Authorization" exists-action="override">

<value>@("Bearer " + context.Variables["access_token"])</value>

</set-header>

</send-request>

<set-variable name="userId" value="@(((IResponse)context.Variables["userResponse"]).Body.As<JObject>()?["id"])" />

<set-method>POST</set-method>

<set-header name="Authorization" exists-action="override">

<value>@("Bearer " + context.Variables["access_token"])</value>

</set-header>

<set-header name="Content-Type" exists-action="override">

<value>application/json</value>

</set-header>

<set-body>@("{\"@odata.id\": \"https://graph.microsoft.com/v1.0/directoryObjects/" + context.Variables["userId"] + "\"}")</set-body>

<rewrite-uri template="@("/v1.0/groups/" + context.Variables["groupId"] + "/members/$ref")" copy-unmatched-params="false" />

<set-backend-service base-url="https://graph.microsoft.com" />

</inbound>

<backend>

<base />

</backend>

<outbound>

<base />

<choose>

<when condition="@(context.Response.StatusCode == 204)">

<return-response>

<set-status code="200" reason="OK" />

<set-body>{ "message": "User Added Successfully." }</set-body>

</return-response>

</when>

<when condition="@(context.Response.StatusCode == 400)">

<return-response>

<set-status code="200" reason="OK" />

<set-body>{ "message": "Bad Request. User Already Member of The Group Or Invalid User Email." }</set-body>

</return-response>

</when>

<when condition="@(context.Response.StatusCode == 500)">

<return-response>

<set-status code="200" reason="OK" />

<set-body>{ "message": "Bad Request. Invalid Group Name." }</set-body>

</return-response>

</when>

</choose>

</outbound>

<on-error>

<base />

</on-error>

</policies>

Answer 2

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

1 deleted comment

Comments have been turned off. Learn more