Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error obtaining AzureAD conditional access #50

Open
amadeus916 opened this issue May 31, 2024 · 1 comment
Open

Error obtaining AzureAD conditional access #50

amadeus916 opened this issue May 31, 2024 · 1 comment

Comments

@amadeus916
Copy link

Hi, Using delegated access and with the Policy.Read.All permission I failed to get CA documentation.

$doc = Get-M365Doc -Components AzureAD
Used application does not have sufficiant permission to access: https://graph.microsoft.com/beta/identity/conditionalAccess/policies
At C:\Program Files\WindowsPowerShell\Modules\M365Documentation\3.3.0\Internal\Helper\Invoke-DocGraph.ps1:62 char:13

  •         throw "Used application does not have sufficiant permissi ...
    
  •         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    

Getting my tokens permissions show Policy.Real.All

scp : AccessReview.Read.All Agreement.Read.All AppCatalog.Read.All Application.Read.All ConsentRequest.Read.All Device.Read.All
DeviceManagementApps.Read.All DeviceManagementConfiguration.Read.All DeviceManagementManagedDevices.Read.All
DeviceManagementRBAC.Read.All DeviceManagementServiceConfig.Read.All Directory.Read.All Domain.Read.All Organization.Read.All
Policy.Read.All PrivilegedAccess.Read.AzureAD PrivilegedAccess.Read.AzureADGroup PrivilegedAccess.Read.AzureResources User.Read
profile openid email

Trying the same in the web I see that is the only permission required

image

@amadeus916
Copy link
Author

Same issue after excluding AADConditionalAccess this time with Identity providers

Used application does not have sufficiant permission to access: https://graph.microsoft.com/beta/identity/identityProviders
At C:\Program Files\WindowsPowerShell\Modules\M365Documentation\3.3.0\Internal\Helper\Invoke-DocGraph.ps1:62 char:13

  •         throw "Used application does not have sufficiant permissi ...
    
  •         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    

    I tried adding IdentityProvider.Read.All and Policy.Read.ConditionalAccess but both errors remain.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant