search

Azure / azure-powershell

Microsoft Azure PowerShell
Other
4.24k stars 3.84k forks source link

Get-AzKeyVault omits display name in Access Policies in some usages #14751

Closed brphelps closed 3 years ago

brphelps commented 3 years ago

Description

I'm running Azure Powershell commands from Azure DevOps, and I'm seeing different behavior on my local machine vs. a build agent. We authenticate the build agent using a service principal, and in a script we query AzKeyVault access policies by calling Get-AzKeyVault.

Running the below script for the same KeyVault name produces a different set of access policies, with our build machine always getting "all policies" since display name is always empty. Example included after a little more explanation...

I'm looking at the debug logs (attached bottom), and it looks like Get-AzKeyVault is doing some calls out to Microsoft graph to populate user data, and hiding errors as it hits them. This seems like a bug -- are there instructions somewhere about what permissions are expected for users to be able to use Get-AzKeyVault correctly?

2021-04-14T18:28:03.5471960Z 
2021-04-14T18:28:03.5477080Z TenantId                     : ***
2021-04-14T18:28:03.5477649Z TenantName                   : ***
2021-04-14T18:28:03.5478434Z ObjectId                     : 200ef4ae-85a8-437b-a912-4f379d895399
2021-04-14T18:28:03.5478922Z ApplicationId                : 
2021-04-14T18:28:03.5479312Z DisplayName                  : 
2021-04-14T18:28:03.5479705Z ApplicationIdDisplayName     : 
2021-04-14T18:28:03.5480303Z PermissionsToKeys            : {Get, List}
2021-04-14T18:28:03.5480855Z PermissionsToKeysStr         : Get, List
2021-04-14T18:28:03.5481337Z PermissionsToSecrets         : {get, list}
2021-04-14T18:28:03.5481837Z PermissionsToSecretsStr      : get, list
2021-04-14T18:28:03.5482308Z PermissionsToCertificates    : {get, list}
2021-04-14T18:28:03.5482826Z PermissionsToCertificatesStr : get, list
2021-04-14T18:28:03.5483297Z PermissionsToStorage         : {}
2021-04-14T18:28:03.5483616Z PermissionsToStorageStr      : 
2021-04-14T18:28:03.5483768Z

Steps to reproduce

$keyVault = Get-AzKeyVault -VaultName $KeyVaultName
$keyVault.AccessPolicies
if ($keyVault -eq $null) {
  throw "KeyVault $KeyVaultName could not be found!"
}

$policiesToRemove = @($keyVault.AccessPolicies | ?{ $_.DisplayName -ieq "" })
if ($policiesToRemove.Count -eq 0) {
  Write-Host "Nothing to remove"
  exit 0
}

Environment data

Name                           Value                                                                                   
----                           -----                                                                                   
PSVersion                      5.1.17763.1490                                                                          
PSEdition                      Desktop                                                                                 
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}                                                                 
BuildVersion                   10.0.17763.1490                                                                         
CLRVersion                     4.0.30319.42000                                                                         
WSManStackVersion              3.0                                                                                     
PSRemotingProtocolVersion      2.3                                                                                     
SerializationVersion           1.1.0.1

Debug output

2021-04-14T18:28:02.8230181Z DEBUG: ============================ HTTP RESPONSE ============================
2021-04-14T18:28:02.8230371Z 
2021-04-14T18:28:02.8230465Z 
2021-04-14T18:28:02.8230547Z 
2021-04-14T18:28:02.8230781Z Status Code:
2021-04-14T18:28:02.8230898Z 
2021-04-14T18:28:02.8231124Z Forbidden
2021-04-14T18:28:02.8231220Z 
2021-04-14T18:28:02.8231318Z 
2021-04-14T18:28:02.8231401Z 
2021-04-14T18:28:02.8231628Z Headers:
2021-04-14T18:28:02.8231741Z 
2021-04-14T18:28:02.8232013Z Pragma                        : no-cache
2021-04-14T18:28:02.8232177Z 
2021-04-14T18:28:02.8232509Z ocp-aad-diagnostics-server-name: oxLNb+z82ZLp7QeBw3I718nsrW79/yTe3VbV1FPb8cs=
2021-04-14T18:28:02.8232704Z 
2021-04-14T18:28:02.8233017Z request-id                    : 34fccc95-f23c-4bc0-80ec-c22974cc5374
2021-04-14T18:28:02.8233212Z 
2021-04-14T18:28:02.8233527Z client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
2021-04-14T18:28:02.8233723Z 
2021-04-14T18:28:02.8233997Z x-ms-dirapi-data-contract-version: 1.6
2021-04-14T18:28:02.8234147Z 
2021-04-14T18:28:02.8234411Z ocp-aad-session-key           : 
2021-04-14T18:28:02.8234854Z v52Et3txFrDU2QxGIUVuHrDv0atPq8fPayEwdrdpBC3sCjT4NGONOvKA4bJAB60fun4itywr-iWlk7lu_RsxOMHS-Y2dk8sdqU0PSLUpX7NUcV2BaUMmceZ
2021-04-14T18:28:02.8235557Z bkWrphyDk.0fzKrl1SSHMx4jWDiYx_-NSwHCffWme2GwcYtXsFPYU
2021-04-14T18:28:02.8235824Z 
2021-04-14T18:28:02.8236103Z Duration                      : 586931
2021-04-14T18:28:02.8236262Z 
2021-04-14T18:28:02.8236529Z x-ms-resource-unit            : 3
2021-04-14T18:28:02.8236671Z 
2021-04-14T18:28:02.8236960Z DataServiceVersion            : 3.0;
2021-04-14T18:28:02.8237109Z 
2021-04-14T18:28:02.8257233Z Strict-Transport-Security     : max-age=31536000; includeSubDomains
2021-04-14T18:28:02.8257570Z 
2021-04-14T18:28:02.8257869Z Access-Control-Allow-Origin   : *
2021-04-14T18:28:02.8258010Z 
2021-04-14T18:28:02.8258301Z Cache-Control                 : no-cache
2021-04-14T18:28:02.8258451Z 
2021-04-14T18:28:02.8258767Z Date                          : Wed, 14 Apr 2021 18:27:59 GMT
2021-04-14T18:28:02.8258960Z 
2021-04-14T18:28:02.8259235Z X-AspNet-Version              : 4.0.30319
2021-04-14T18:28:02.8259386Z 
2021-04-14T18:28:02.8259658Z X-Powered-By                  : ASP.NET
2021-04-14T18:28:02.8259818Z 
2021-04-14T18:28:02.8259898Z 
2021-04-14T18:28:02.8260003Z 
2021-04-14T18:28:02.8260223Z Body:
2021-04-14T18:28:02.8260316Z 
2021-04-14T18:28:02.8260539Z {
2021-04-14T18:28:02.8260622Z 
2021-04-14T18:28:02.8260856Z   "odata.error": {
2021-04-14T18:28:02.8260980Z 
2021-04-14T18:28:02.8261372Z     "code": "Authorization_RequestDenied",
2021-04-14T18:28:02.8261517Z 
2021-04-14T18:28:02.8261751Z     "message": {
2021-04-14T18:28:02.8261873Z 
2021-04-14T18:28:02.8262108Z       "lang": "en",
2021-04-14T18:28:02.8262219Z 
2021-04-14T18:28:02.8262535Z       "value": "Insufficient privileges to complete the operation."
2021-04-14T18:28:02.8262709Z 
2021-04-14T18:28:02.8262928Z     },
2021-04-14T18:28:02.8263034Z 
2021-04-14T18:28:02.8263321Z     "requestId": "34fccc95-f23c-4bc0-80ec-c22974cc5374",
2021-04-14T18:28:02.8263485Z 
2021-04-14T18:28:02.8263744Z     "date": "2021-04-14T18:28:00"
2021-04-14T18:28:02.8263900Z 
2021-04-14T18:28:02.8264114Z   }
2021-04-14T18:28:02.8264214Z 
2021-04-14T18:28:02.8264423Z }
2021-04-14T18:28:02.8264507Z
dingmeng-xue commented 3 years ago

@brphelps , please share debug message of cmdlet execution on local machine and ADO. The debug message can be turned on via $DebugPreference = "Continue".

In addition, please try the same SP on your local machine.

brphelps commented 3 years ago

I did, as I described in the description I tried both local machine and a build agent. The local machine works as expected, the build agent does not. The debug output is copied and pasted above -- It's showing that there's an authorization_requestdenied.

brphelps commented 3 years ago

The full debug content is too long to fit into a single post.

If you encounter authentication errors, make sure you've installed the Azure PowerShell modules and run Login-AzAccount beforehand
DEBUG: 6:27:57 PM - SetAzureRMContextCommand begin processing with ParameterSet 'Subscription'.
DEBUG: 6:27:57 PM - using account id '***'...
DEBUG: 6:27:57 PM - Autosave setting from startup session: 'CurrentUser'
DEBUG: 6:27:57 PM - No autosave setting detected in environment variable 'AzContextAutoSave'. 
DEBUG: 6:27:57 PM - Using Autosave scope 'CurrentUser'
DEBUG: ClientSecretCredential.GetToken invoked. Scopes: [ https://management.core.windows.net//.default ] 
ParentRequestId: 
DEBUG: Request [c75bc295-6a11-4e0b-9faf-c5687f88cd7c] POST 
https://login.microsoftonline.com/***/oauth2/v2.0/token
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-CPU:REDACTED
x-client-OS:REDACTED
x-client-current-telemetry:REDACTED
x-client-last-telemetry:REDACTED
x-ms-PKeyAuth:REDACTED
x-ms-lib-capability:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-app-name:REDACTED
x-app-ver:REDACTED
Content-Type:application/x-www-form-urlencoded
x-ms-client-request-id:c75bc295-6a11-4e0b-9faf-c5687f88cd7c
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.4.0-beta.3 (.NET Framework 4.8.4341.0; Microsoft Windows 10.0.17763 )
client assembly: Azure.Identity
DEBUG: Response [c75bc295-6a11-4e0b-9faf-c5687f88cd7c] 200 OK (00.1s)
Pragma:no-cache
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
client-request-id:REDACTED
x-ms-request-id:REDACTED
x-ms-ests-server:REDACTED
x-ms-clitelem:REDACTED
Cache-Control:no-store, no-cache
Content-Type:application/json; charset=utf-8
Expires:-1
P3P:REDACTED
Set-Cookie:REDACTED
Date:Wed, 14 Apr 2021 18:27:57 GMT
Content-Length:1381
DEBUG: ClientSecretCredential.GetToken succeeded. Scopes: [ https://management.core.windows.net//.default ] 
ParentRequestId:  ExpiresOn: 2021-04-15T18:27:56.0000000+00:00
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
GET

Absolute Uri:
https://management.azure.com/tenants?api-version=2019-06-01

Headers:
x-ms-client-request-id        : d97bc1cc-2d8d-4092-a482-c07604768905
accept-language               : en-US

Body:

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
OK

Headers:
Pragma                        : no-cache
x-ms-ratelimit-remaining-tenant-reads: 11999
x-ms-request-id               : c8f19323-9aa9-4a9b-a28b-6cf0a09bd54d
x-ms-correlation-request-id   : c8f19323-9aa9-4a9b-a28b-6cf0a09bd54d
x-ms-routing-request-id       : EASTUS:20210414T182757Z:c8f19323-9aa9-4a9b-a28b-6cf0a09bd54d
Strict-Transport-Security     : max-age=31536000; includeSubDomains
X-Content-Type-Options        : nosniff
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:27:57 GMT

Body:
{
  "value": [
    {
      "id": "/tenants/***",
      "tenantId": "***",
      "tenantCategory": "Home"
    }
  ]
}

DEBUG: ClientSecretCredential.GetToken invoked. Scopes: [ https://management.core.windows.net//.default ] 
ParentRequestId: 
DEBUG: Request [cbbb8ebc-6d33-4f25-94d7-5db2f5d7e2ca] POST 
https://login.microsoftonline.com/***/oauth2/v2.0/token
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-CPU:REDACTED
x-client-OS:REDACTED
x-client-current-telemetry:REDACTED
x-client-last-telemetry:REDACTED
x-ms-PKeyAuth:REDACTED
x-ms-lib-capability:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-app-name:REDACTED
x-app-ver:REDACTED
Content-Type:application/x-www-form-urlencoded
x-ms-client-request-id:cbbb8ebc-6d33-4f25-94d7-5db2f5d7e2ca
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.4.0-beta.3 (.NET Framework 4.8.4341.0; Microsoft Windows 10.0.17763 )
client assembly: Azure.Identity
DEBUG: Response [cbbb8ebc-6d33-4f25-94d7-5db2f5d7e2ca] 200 OK (00.1s)
Pragma:no-cache
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
client-request-id:REDACTED
x-ms-request-id:REDACTED
x-ms-ests-server:REDACTED
x-ms-clitelem:REDACTED
Content-Length:1381
Cache-Control:no-store, no-cache
Content-Type:application/json; charset=utf-8
Expires:-1
P3P:REDACTED
Set-Cookie:REDACTED
Date:Wed, 14 Apr 2021 18:27:57 GMT
DEBUG: ClientSecretCredential.GetToken succeeded. Scopes: [ https://management.core.windows.net//.default ] 
ParentRequestId:  ExpiresOn: 2021-04-15T18:27:57.0000000+00:00
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
GET

Absolute Uri:
https://management.azure.com/subscriptions?api-version=2019-06-01

Headers:
x-ms-client-request-id        : d97bc1cc-2d8d-4092-a482-c07604768905
accept-language               : en-US

Body:

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
OK

Headers:
Pragma                        : no-cache
x-ms-ratelimit-remaining-tenant-reads: 11998
x-ms-request-id               : 9ad7b0a2-218c-46cc-ac8a-36526190814b
x-ms-correlation-request-id   : 9ad7b0a2-218c-46cc-ac8a-36526190814b
x-ms-routing-request-id       : EASTUS:20210414T182758Z:9ad7b0a2-218c-46cc-ac8a-36526190814b
Strict-Transport-Security     : max-age=31536000; includeSubDomains
X-Content-Type-Options        : nosniff
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:27:58 GMT

Body:
{
  "value": [
    {
      "id": "/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46",
      "authorizationSource": "RoleBased",
      "managedByTenants": [],
      "subscriptionId": "7afc2d66-d5b4-4e84-970b-a782e3e4cc46",
      "tenantId": "***",
      "displayName": "CLOUDBUILD-ANYBUILD-POC-01",
      "state": "Enabled",
      "subscriptionPolicies": {
        "locationPlacementId": "Internal_2014-09-01",
        "quotaId": "Internal_2014-09-01",
        "spendingLimit": "Off"
      }
    }
  ],
  "count": {
    "type": "Total",
    "value": 1
  }
}

Name               : CLOUDBUILD-ANYBUILD-POC-01 (7afc2d66-d5b4-4e84-970b-a782e3e4cc46) - 
                     *** - ***
Account            : ***
Environment        : AzureCloud
Subscription       : 7afc2d66-d5b4-4e84-970b-a782e3e4cc46
Tenant             : ***
TokenCache         : 
VersionProfile     : 
ExtendedProperties : {}
DEBUG: AzureQoSEvent: CommandName - Set-AzContext; IsSuccess - True; Duration - 00:00:00.2874773
DEBUG: Finish sending metric.
DEBUG: 6:27:58 PM - SetAzureRMContextCommand end processing.
DEBUG: 6:27:58 PM - GetAzureKeyVault begin processing with ParameterSet 'GetVaultByName'.
DEBUG: 6:27:58 PM - using account id '***'...
DEBUG: [Common.Authentication]: Authenticating using Account: '***', environment: 
'AzureCloud', tenant: '***'
DEBUG: ClientSecretCredential.GetToken invoked. Scopes: [ https://management.core.windows.net//.default ] 
ParentRequestId: 
DEBUG: Request [119f7ff4-141a-455b-97d1-074bf6fd210a] POST 
https://login.microsoftonline.com/***/oauth2/v2.0/token
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-CPU:REDACTED
x-client-OS:REDACTED
x-client-current-telemetry:REDACTED
x-client-last-telemetry:REDACTED
x-ms-PKeyAuth:REDACTED
x-ms-lib-capability:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-app-name:REDACTED
x-app-ver:REDACTED
Content-Type:application/x-www-form-urlencoded
x-ms-client-request-id:119f7ff4-141a-455b-97d1-074bf6fd210a
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.4.0-beta.3 (.NET Framework 4.8.4341.0; Microsoft Windows 10.0.17763 )
client assembly: Azure.Identity
DEBUG: Response [119f7ff4-141a-455b-97d1-074bf6fd210a] 200 OK (00.1s)
Pragma:no-cache
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
client-request-id:REDACTED
x-ms-request-id:REDACTED
x-ms-ests-server:REDACTED
x-ms-clitelem:REDACTED
Content-Length:1381
Cache-Control:no-store, no-cache
Content-Type:application/json; charset=utf-8
Expires:-1
P3P:REDACTED
Set-Cookie:REDACTED
Date:Wed, 14 Apr 2021 18:27:58 GMT
DEBUG: ClientSecretCredential.GetToken succeeded. Scopes: [ https://management.core.windows.net//.default ] 
ParentRequestId:  ExpiresOn: 2021-04-15T18:27:58.0000000+00:00
DEBUG: [Common.Authentication]: Received token with LoginType 'User', Tenant: '***', 
UserId: '***'
DEBUG: [Common.Authentication]: Authenticating using Account: '***', environment: 
'AzureCloud', tenant: '***'
DEBUG: ClientSecretCredential.GetToken invoked. Scopes: [ https://management.core.windows.net//.default ] 
ParentRequestId: 
DEBUG: Request [891de658-3c73-4a52-8835-d245991d53b4] POST 
https://login.microsoftonline.com/***/oauth2/v2.0/token
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-CPU:REDACTED
x-client-OS:REDACTED
x-client-current-telemetry:REDACTED
x-client-last-telemetry:REDACTED
x-ms-PKeyAuth:REDACTED
x-ms-lib-capability:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-app-name:REDACTED
x-app-ver:REDACTED
Content-Type:application/x-www-form-urlencoded
x-ms-client-request-id:891de658-3c73-4a52-8835-d245991d53b4
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.4.0-beta.3 (.NET Framework 4.8.4341.0; Microsoft Windows 10.0.17763 )
client assembly: Azure.Identity
DEBUG: Response [891de658-3c73-4a52-8835-d245991d53b4] 200 OK (00.2s)
Pragma:no-cache
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
client-request-id:REDACTED
x-ms-request-id:REDACTED
x-ms-ests-server:REDACTED
x-ms-clitelem:REDACTED
Content-Length:1381
Cache-Control:no-store, no-cache
Content-Type:application/json; charset=utf-8
Expires:-1
P3P:REDACTED
Set-Cookie:REDACTED
Date:Wed, 14 Apr 2021 18:27:58 GMT
DEBUG: ClientSecretCredential.GetToken succeeded. Scopes: [ https://management.core.windows.net//.default ] 
ParentRequestId:  ExpiresOn: 2021-04-15T18:27:58.0000000+00:00
DEBUG: [Common.Authentication]: Received token with LoginType 'User', Tenant: '***', 
UserId: '***'
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
GET

Absolute Uri:
https://management.azure.com/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resources?$filter=resourceType eq 
'Microsoft.KeyVault/vaults'&api-version=2016-09-01

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
OK

Headers:
Pragma                        : no-cache
x-ms-ratelimit-remaining-subscription-reads: 11999
x-ms-request-id               : f9713922-61b2-4eef-ba37-f856eb154c5c
x-ms-correlation-request-id   : f9713922-61b2-4eef-ba37-f856eb154c5c
x-ms-routing-request-id       : EASTUS:20210414T182759Z:f9713922-61b2-4eef-ba37-f856eb154c5c
Strict-Transport-Security     : max-age=31536000; includeSubDomains
X-Content-Type-Options        : nosniff
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:27:58 GMT

Body:
{
  "value": [
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-itodirel-WestUS2/providers/Microsoft.KeyVa
ult/vaults/AnyBuilditodirelWestUS2",
      "name": "AnyBuilditodirelWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/itodirel"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-Prod-WestUS2/providers/Microsoft.KeyVault/
vaults/AnyBuildprodWestUS2",
      "name": "AnyBuildprodWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/Prod"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-CI10-WestUS2/providers/Microsoft.KeyVault/vault
s/ABRCI10WestUS2",
      "name": "ABRCI10WestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuildPOC-VMs-WestUS2/providers/Microsoft.KeyVaul
t/vaults/VaultABAgentWestUS2",
      "name": "VaultABAgentWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-RelTest-EastUS/providers/Microsoft.KeyVaul
t/vaults/AnyBuildreltestEastUS",
      "name": "AnyBuildreltestEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/RelTest"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-YATest-EastUS/providers/Microsoft.KeyVault
/vaults/AnyBuildyatestEastUS",
      "name": "AnyBuildyatestEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-Test-WestUS2/providers/Microsoft.KeyVault/vault
s/ABRTestWestUS2",
      "name": "ABRTestWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-CI6-WestUS2/providers/Microsoft.KeyVault/vaults
/ABRCI6WestUS2",
      "name": "ABRCI6WestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-joboles-WestUS2/providers/Microsoft.KeyVau
lt/vaults/AnyBuildjobolesWestUS2",
      "name": "AnyBuildjobolesWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/joboles"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-PerfTest-WestUS2/providers/Microsoft.KeyVa
ult/vaults/AnyBuildperftestWestUS2",
      "name": "AnyBuildperftestWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/PerfTest"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-GameTeam-WestUS2/providers/Microsoft.KeyVa
ult/vaults/AnyBuildgameteamWestUS2",
      "name": "AnyBuildgameteamWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/GameTeam"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-CI7-WestUS2/providers/Microsoft.KeyVault/vaults
/ABRCI7WestUS2",
      "name": "ABRCI7WestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuildLLVMCatchall/providers/Microsoft.KeyVault/v
aults/LLVMBuildVault",
      "name": "LLVMBuildVault",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-kevin-WestUS2/providers/Microsoft.KeyVault
/vaults/AnyBuildkevinWestUS2",
      "name": "AnyBuildkevinWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/kevin"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-kewilli-WestUS2/providers/Microsoft.KeyVau
lt/vaults/AnyBuildkewilliWestUS2",
      "name": "AnyBuildkewilliWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/kewilli"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuildPOC-VMs-NEurope/providers/Microsoft.KeyVaul
t/vaults/VaultAnyBuildTestNEurope",
      "name": "VaultAnyBuildTestNEurope",
      "type": "Microsoft.KeyVault/vaults",
      "location": "northeurope",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuildPOC-VMs-NEurope/providers/Microsoft.KeyVaul
t/vaults/VaultAnyBuildProdNEurope",
      "name": "VaultAnyBuildProdNEurope",
      "type": "Microsoft.KeyVault/vaults",
      "location": "northeurope",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuildPOC-VMs-EastUS/providers/Microsoft.KeyVault
/vaults/VaultABAgentEastUS",
      "name": "VaultABAgentEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-ABCIP-EastUS/providers/Microsoft.KeyVault/
vaults/AnyBuildabcipEastUS",
      "name": "AnyBuildabcipEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/ABCIP"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-ABCIWin-EastUS/providers/Microsoft.KeyVaul
t/vaults/AnyBuildabciwinEastUS",
      "name": "AnyBuildabciwinEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/ABCIWin"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-ABCILin-EastUS/providers/Microsoft.KeyVaul
t/vaults/AnyBuildabcilinEastUS",
      "name": "AnyBuildabcilinEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/ABCILin"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-CI4-EastUS/providers/Microsoft.KeyVault/vaults/
ABRCI4EastUS",
      "name": "ABRCI4EastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-CI9-EastUS/providers/Microsoft.KeyVault/vaults/
ABRCI9EastUS",
      "name": "ABRCI9EastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-huihu-EastUS/providers/Microsoft.KeyVault/
vaults/AnyBuildhuihuEastUS",
      "name": "AnyBuildhuihuEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-CI8-EastUS/providers/Microsoft.KeyVault/vaults/
ABRCI8EastUS",
      "name": "ABRCI8EastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-CI3-EastUS/providers/Microsoft.KeyVault/vaults/
ABRCI3EastUS",
      "name": "ABRCI3EastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-CI1-EastUS/providers/Microsoft.KeyVault/vaults/
ABRCI1EastUS",
      "name": "ABRCI1EastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-Test-EastUS/providers/Microsoft.KeyVault/vaults
/ABRTestEastUS",
      "name": "ABRTestEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-LLVMVna-NEurope/providers/Microsoft.KeyVau
lt/vaults/AnyBuildllvmvnaNEurope",
      "name": "AnyBuildllvmvnaNEurope",
      "type": "Microsoft.KeyVault/vaults",
      "location": "northeurope",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/LLVMVna"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-RMP92061-EastUS/providers/Microsoft.KeyVau
lt/vaults/AnyBuildrmp92061EastUS",
      "name": "AnyBuildrmp92061EastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/RMP92061"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-CI5-EastUS/providers/Microsoft.KeyVault/vaults/
ABRCI5EastUS",
      "name": "ABRCI5EastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-RMP92085F-EastUS/providers/Microsoft.KeyVa
ult/vaults/AnyBuildrmp92085fEastUS",
      "name": "AnyBuildrmp92085fEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/RMP92085F"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-brphelps-EastUS/providers/Microsoft.KeyVau
lt/vaults/AnyBuildbrphelpsEastUS",
      "name": "AnyBuildbrphelpsEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/brphelps"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-erikmav-EastUS/providers/Microsoft.KeyVaul
t/vaults/AnyBuilderikmavEastUS",
      "name": "AnyBuilderikmavEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/erikmav"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-PerfTestL-EastUS/providers/Microsoft.KeyVa
ult/vaults/AnyBuildperftestlEastUS",
      "name": "AnyBuildperftestlEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/PerfTestL"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-imnarasaP0-EastUS/providers/Microsoft.KeyV
ault/vaults/AnyBuildimnarasap0EastUS",
      "name": "AnyBuildimnarasap0EastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/imnarasaP0"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-CI10-EastUS/providers/Microsoft.KeyVault/vaults
/ABRCI10EastUS",
      "name": "ABRCI10EastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-AleksLLVM-EastUS/providers/Microsoft.KeyVa
ult/vaults/AnyBuildaleksllvmEastUS",
      "name": "AnyBuildaleksllvmEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/AleksLLVM"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-erikmav2-EastUS/providers/Microsoft.KeyVau
lt/vaults/AnyBuilderikmav2EastUS",
      "name": "AnyBuilderikmav2EastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/erikmav2"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-CI2-EastUS/providers/Microsoft.KeyVault/vaults/
ABRCI2EastUS",
      "name": "ABRCI2EastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-ABCIWinY-EastUS/providers/Microsoft.KeyVau
lt/vaults/AnyBuildabciwinyEastUS",
      "name": "AnyBuildabciwinyEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/ABCIWinY"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-ABCILinY-EastUS/providers/Microsoft.KeyVau
lt/vaults/AnyBuildabcilinyEastUS",
      "name": "AnyBuildabcilinyEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/ABCILinY"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuildPOC-VMs-NEurope/providers/Microsoft.KeyVaul
t/vaults/VaultABAgentNEurope",
      "name": "VaultABAgentNEurope",
      "type": "Microsoft.KeyVault/vaults",
      "location": "northeurope",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/ABR-Test-NEurope/providers/Microsoft.KeyVault/vault
s/ABRTestNEurope",
      "name": "ABRTestNEurope",
      "type": "Microsoft.KeyVault/vaults",
      "location": "northeurope",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-ABCILINY-WestUS2/providers/Microsoft.KeyVa
ult/vaults/AnyBuildabcilinyWestUS2",
      "name": "AnyBuildabcilinyWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/ABCILINY"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-Office-WestUS2/providers/Microsoft.KeyVaul
t/vaults/AnyBuildofficeWestUS2",
      "name": "AnyBuildofficeWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/Office"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-dgonchwin-WestUS2/providers/Microsoft.KeyV
ault/vaults/AnyBuilddgonchwinWestUS2",
      "name": "AnyBuilddgonchwinWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/dgonchwin"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-dgonchlnx-WestUS2/providers/Microsoft.KeyV
ault/vaults/AnyBuilddgonchlnxWestUS2",
      "name": "AnyBuilddgonchlnxWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/dgonchlnx"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-AM-Perf-EastUS/providers/Microsoft.KeyVaul
t/vaults/AnyBuildam-perfEastUS",
      "name": "AnyBuildam-perfEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/AM-Perf"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-PerfKs-EastUS/providers/Microsoft.KeyVault
/vaults/AnyBuildperfksEastUS",
      "name": "AnyBuildperfksEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/PerfKs"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-AM-Perf4-EastUS/providers/Microsoft.KeyVau
lt/vaults/AnyBuildam-perf4EastUS",
      "name": "AnyBuildam-perf4EastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/AM-Perf4"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-LLVMNight-EastUS/providers/Microsoft.KeyVa
ult/vaults/AnyBuildllvmnightEastUS",
      "name": "AnyBuildllvmnightEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/LLVMNight"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuild-AnyBuildRM-EastUS/providers/Microsoft.KeyV
ault/vaults/AnyBuildanybuildrmEastUS",
      "name": "AnyBuildanybuildrmEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {
        "TargetResourceId": "/subscriptions//resourceGroups//providers/Microsoft.AnyBuild/clusters/AnyBuildRM"
      }
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuildPOC-VMs-EastUS/providers/Microsoft.KeyVault
/vaults/VaultAnyBuildTestEastUS",
      "name": "VaultAnyBuildTestEastUS",
      "type": "Microsoft.KeyVault/vaults",
      "location": "eastus",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuildPOC-VMs-WestUS2/providers/Microsoft.KeyVaul
t/vaults/VaultAnyBuildProdWestUS2",
      "name": "VaultAnyBuildProdWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuildPOC-VMs-WestUS2/providers/Microsoft.KeyVaul
t/vaults/AnyBuildPocVMsSecrets",
      "name": "AnyBuildPocVMsSecrets",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuildPOC-VMs-WestUS2/providers/Microsoft.KeyVaul
t/vaults/VaultAnyBuildTestWestUS2",
      "name": "VaultAnyBuildTestWestUS2",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {}
    },
    {
      "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/CertOperationalRootVaultTest/providers/Microsoft.Ke
yVault/vaults/certs1",
      "name": "certs1",
      "type": "Microsoft.KeyVault/vaults",
      "location": "westus2",
      "tags": {}
    }
  ]
}

DEBUG: [Common.Authentication]: Authenticating using Account: '***', environment: 
'AzureCloud', tenant: '***'
DEBUG: ClientSecretCredential.GetToken invoked. Scopes: [ https://graph.windows.net//.default ] ParentRequestId: 
DEBUG: Request [b4b6f124-067a-406b-8de5-053bb1f71927] POST 
https://login.microsoftonline.com/***/oauth2/v2.0/token
x-client-SKU:REDACTED
x-client-Ver:REDACTED
x-client-CPU:REDACTED
x-client-OS:REDACTED
x-client-current-telemetry:REDACTED
x-client-last-telemetry:REDACTED
x-ms-PKeyAuth:REDACTED
x-ms-lib-capability:REDACTED
client-request-id:REDACTED
return-client-request-id:REDACTED
x-app-name:REDACTED
x-app-ver:REDACTED
Content-Type:application/x-www-form-urlencoded
x-ms-client-request-id:b4b6f124-067a-406b-8de5-053bb1f71927
x-ms-return-client-request-id:true
User-Agent:azsdk-net-Identity/1.4.0-beta.3 (.NET Framework 4.8.4341.0; Microsoft Windows 10.0.17763 )
client assembly: Azure.Identity
DEBUG: Response [b4b6f124-067a-406b-8de5-053bb1f71927] 200 OK (00.2s)
Pragma:no-cache
Strict-Transport-Security:REDACTED
X-Content-Type-Options:REDACTED
client-request-id:REDACTED
x-ms-request-id:REDACTED
x-ms-ests-server:REDACTED
x-ms-clitelem:REDACTED
Cache-Control:no-store, no-cache
Content-Type:application/json; charset=utf-8
Expires:-1
P3P:REDACTED
Set-Cookie:REDACTED
Date:Wed, 14 Apr 2021 18:27:58 GMT
Content-Length:1374
DEBUG: ClientSecretCredential.GetToken succeeded. Scopes: [ https://graph.windows.net//.default ] ParentRequestId:  
ExpiresOn: 2021-04-15T18:27:58.0000000+00:00
DEBUG: [Common.Authentication]: Received token with LoginType 'User', Tenant: '***', 
UserId: '***'
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
GET

Absolute Uri:
https://management.azure.com/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuildPOC-VMs-WestUS2/
providers/Microsoft.KeyVault/vaults/VaultAnyBuildTestWestUS2?api-version=2019-09-01

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
OK

Headers:
Pragma                        : no-cache
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-keyvault-service-version : 1.1.248.2
x-ms-request-id               : 875248e1-2f2f-429c-a886-b4ffd7b309c5
Strict-Transport-Security     : max-age=31536000; includeSubDomains
X-Content-Type-Options        : nosniff
x-ms-ratelimit-remaining-subscription-reads: 11998
x-ms-correlation-request-id   : d6cc9e93-b491-4e42-bb8e-40e2be4a2151
x-ms-routing-request-id       : EASTUS:20210414T182800Z:d6cc9e93-b491-4e42-bb8e-40e2be4a2151
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:27:59 GMT
Server                        : Microsoft-IIS/10.0
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "id": 
"/subscriptions/7afc2d66-d5b4-4e84-970b-a782e3e4cc46/resourceGroups/AnyBuildPOC-VMs-WestUS2/providers/Microsoft.KeyVaul
t/vaults/VaultAnyBuildTestWestUS2",
  "name": "VaultAnyBuildTestWestUS2",
  "type": "Microsoft.KeyVault/vaults",
  "location": "westus2",
  "tags": {},
  "properties": {
    "sku": {
      "family": "A",
      "name": "standard"
    },
    "tenantId": "***",
    "accessPolicies": [
      {
        "tenantId": "***",
        "objectId": "9592062e-3299-47b9-9260-f495555aef39",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "3589d868-742f-49ed-903b-7d0bc7ec9e7c",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "2416c31e-a29d-44cf-8e94-50547f0bf6e3",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "d5a568c2-801f-4302-a379-a130ad8c11f0",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "21a6b3e3-f024-436c-9ded-c96da08ffdf3",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "51598598-89a2-4313-b438-a319e9e2920a",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "200ef4ae-85a8-437b-a912-4f379d895399",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "062a1eda-d72f-47a2-92bc-66381ad43b85",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "f141f16b-f4d7-4212-922e-49db5ffa8d90",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "b07c7ab7-54dd-489b-86f6-c2b56ef0548b",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "e2d9c419-4c3f-49ca-b720-4ac8b455f5dc",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "1f7f3d8b-374e-4333-a706-3f5502fd5cb7",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "90da58b1-b661-48be-bc0e-e07acee7851e",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "9b8db8eb-f13d-4672-a214-435339efe681",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "18cc4cd1-5dd8-4743-b6a4-7d0466dcd3e0",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "90556f3f-b7fd-4d63-ba8a-0814a598c648",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "7a3f750a-63d3-430d-980e-ec920feddaa3",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "1f7beeb0-dcef-4aaa-8e18-32c99d8d9f87",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "c422c27a-1897-49d8-89be-1a5642c28f52",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "7ee64a8c-dd99-45a8-8122-9eafb1ead584",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "6bfa8fd2-1599-4bd4-94eb-e85f425c214f",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "eeab76a5-1bf2-4e58-9b6f-5537755a2609",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "9b77517b-bab8-4b7a-90ff-e28acd5d79be",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "fde1d395-7018-4cb5-8a48-620ae6b53ccb",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "a49cff5c-56c0-439a-86a2-69c2f7bdde2a",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "309bcc54-1ccc-4416-9ecd-5f779369756e",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
brphelps commented 3 years ago 
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "6736da64-42c1-4bc9-b38b-7b326347756e",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "ee08cf77-01f0-49c6-b795-11c95de18c43",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "5a14fb09-136a-41f0-9683-3643bd59717a",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "3cc91c28-2bb3-4ecc-99fc-35f6206c0c72",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      },
      {
        "tenantId": "***",
        "objectId": "f33833ec-c890-43d5-86f9-290ab58abe11",
        "permissions": {
          "keys": [
            "Get",
            "List"
          ],
          "secrets": [
            "get",
            "list"
          ],
          "certificates": [
            "get",
            "list"
          ],
          "storage": []
        }
      }
    ],
    "enabledForDeployment": true,
    "enabledForDiskEncryption": false,
    "enabledForTemplateDeployment": true,
    "enableSoftDelete": true,
    "softDeleteRetentionInDays": 90,
    "enableRbacAuthorization": false,
    "vaultUri": "https://vaultanybuildtestwestus2.vault.azure.net/",
    "provisioningState": "Succeeded"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "9592062e-3299-47b9-9260-f495555aef39"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: uQ+WegEz0gyM3yDgsZx5atxfhSEdZ+jIRyLzVJacyjA=
request-id                    : 5c133dd1-a33e-4a6d-8f1a-aa27eb6c6de9
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
Ug9C31V7eDsStFI8vSO8uCGKprafhYOO-KRRqVQiaca5cxk6ID5wvMEAVj6MTNfvPdn-X7NgfvIDobHP5qoIZzQPfEIpKqkKERgtWf7AReo9PVzNv6I4W2v
EEZSYc7ek.4SIBtmEEeZ0REvfhCQH_dvE9K8E47-fV-EJW1l8ka0I
Duration                      : 1003458
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:27:59 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "5c133dd1-a33e-4a6d-8f1a-aa27eb6c6de9",
    "date": "2021-04-14T18:28:00"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "3589d868-742f-49ed-903b-7d0bc7ec9e7c"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: 59myZKlqd2aVfUpQWt364lByt/cl5K7drWj1zB0XMIk=
request-id                    : 8ac7bd7a-d963-4fb8-a31f-cf42fb041f2f
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
qyD5iZe1qQR9xt6RFWo83PeShD0ow6ya_jUhI9y6_2E5N89rQPIWEFuTRmK4Jr1rLHerBcfYsWA9Cz3zgJzcb9XNujvUVLNquyqyB6VVmQY8oYpQ5ybOe0R
DidlfpcNO.9LRMXDvgNJQg1vqwZbgefSsPf1BlVsPRWucLqlJB8rE
Duration                      : 619485
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:00 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "8ac7bd7a-d963-4fb8-a31f-cf42fb041f2f",
    "date": "2021-04-14T18:28:00"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "2416c31e-a29d-44cf-8e94-50547f0bf6e3"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: oxLNb+z82ZLp7QeBw3I718nsrW79/yTe3VbV1FPb8cs=
request-id                    : 34fccc95-f23c-4bc0-80ec-c22974cc5374
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
v52Et3txFrDU2QxGIUVuHrDv0atPq8fPayEwdrdpBC3sCjT4NGONOvKA4bJAB60fun4itywr-iWlk7lu_RsxOMHS-Y2dk8sdqU0PSLUpX7NUcV2BaUMmceZ
bkWrphyDk.0fzKrl1SSHMx4jWDiYx_-NSwHCffWme2GwcYtXsFPYU
Duration                      : 586931
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:27:59 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "34fccc95-f23c-4bc0-80ec-c22974cc5374",
    "date": "2021-04-14T18:28:00"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "d5a568c2-801f-4302-a379-a130ad8c11f0"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: Y5sjPLE/sRU/EGOJZEhDYPJjCAUNHeEWkmn4cJQ2/VY=
request-id                    : c545b149-e67f-4dea-8cef-f9333bec058e
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
ggEKP8ZF4xCcSgAhjWnprWkdk4oaIL5sDFG2NRqsjlx_Jv95V32G5EaHIx60GsnICsXMTdgxFIAldxMoMyu84fto3iD_XDZxMIUo5vkjI3so5psFtZHIeck
7RftlHREw.xGi81nvNrliryARAxakB2RwyXMvu6cHo5ecV6tvljMI
Duration                      : 664890
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:27:59 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "c545b149-e67f-4dea-8cef-f9333bec058e",
    "date": "2021-04-14T18:28:00"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "21a6b3e3-f024-436c-9ded-c96da08ffdf3"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: Bu0LA6J8E52MCvlpyYv1kETSpn0Ypzf+dZg4UHfh/VI=
request-id                    : e4a4db59-8009-4397-a4f9-f35e841d37f3
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
C31yOtuhr4oOaSWJcwOPc_SNCZlNDq17IyioetGKO7vn7mRm730wZHDkqTQSkBNOFpfol7Jv4b7PiuVk24GdcBAmAsKuyRy_sFapVKpEP9kxbxy_hCYDD2p
cI6g0jIbj.xf4CulTDgDagZ8Ls29-tC5QByw4mJfT9ziJvCIuVMn4
Duration                      : 488243
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:00 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "e4a4db59-8009-4397-a4f9-f35e841d37f3",
    "date": "2021-04-14T18:28:00"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "51598598-89a2-4313-b438-a319e9e2920a"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: +XD4WjN5le0h2uIKBfEgBGn+lhgxS1Z1ZtPTW1F+r1Q=
request-id                    : de4da87c-9bae-4703-9f43-430c1676eb5a
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
LLVrga1V44VfUfX8eLUiIUijGM0MZp_fS9lzpCCVDzr42MRSzboXywvg6c93d2vAWIL_oJyUPUsf67shGOhcdn5tnssJOQhzh3PbKPypjBpl-KKJPP1LNTN
NnMTB5wQ-.RzwIMMsj1WyRpe24sM4fRnrcvMX04e76whyKAzyP-fc
Duration                      : 507881
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:00 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "de4da87c-9bae-4703-9f43-430c1676eb5a",
    "date": "2021-04-14T18:28:00"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "200ef4ae-85a8-437b-a912-4f379d895399"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: JZ/rdlXNqLw0HkEYZMLAjLHu57ERBF1xYbtnCEASQ0k=
request-id                    : b4972b93-ae4c-456e-854e-2b231ec1cb88
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
KyqGVoZTjoWfmNuy2Kv7oCIfE05l5CmC-rD295FcIXAVNw6JIKcIXKyPTTvqgAJbjBwNfBuJMTcm415CZCLTfKd9DmzdasvVH67-lj_0NNeNQE8z6ifSy3R
gEuiShMib.r3WupvWN0xDmXLGEXG21l8S6WxNmbE7mmjh-rvUPz0g
Duration                      : 531717
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:00 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "b4972b93-ae4c-456e-854e-2b231ec1cb88",
    "date": "2021-04-14T18:28:00"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "062a1eda-d72f-47a2-92bc-66381ad43b85"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: nMDMcQIwZZsXMZSm4ELvnf31gJr2O+tHY9wnOhAKkVc=
request-id                    : 08459a38-e5c5-41f2-bed8-bd97caa440cf
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
csTfC-NJUjKNqGkmM5ovrfdLq-4Kk0imZufoLnaVt-FHEfw1FPbdkO4EDY9WpJhXsvKnFq1zYBxL5DjLIEZMMoe3ThPHHtFCU-AE0_ZZyyaRv6WRM4j9ICz
mJ9AQMXCs.duKuvfq-RvIO9wpHkw0t2eNmhsbDzCVrGcGlLPWoKws
Duration                      : 674074
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:00 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "08459a38-e5c5-41f2-bed8-bd97caa440cf",
    "date": "2021-04-14T18:28:00"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "f141f16b-f4d7-4212-922e-49db5ffa8d90"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: Stjmur9U6HC16V8z/jgcQYTQVCDShozo8tICnJkvn+w=
request-id                    : 89408497-3fdb-4416-8618-f1ea01f1cc9f
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
AqEDx-jNGRwIACQr3cqBKZnDrGp3MbN-NZFpLONy75p-OfQleqk0iM4DGPp7Kn_-q9EBc09mlUzcUbwwZjughw5vH5j_SM-Q6jrjJjrLd9TabTTNpeYUKmE
2PZHcVMdW.qzKMYA0k5XRQ07RF95xyrsD4U-HLZNfabUWWB99TVe8
Duration                      : 596114
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:27:59 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "89408497-3fdb-4416-8618-f1ea01f1cc9f",
    "date": "2021-04-14T18:28:00"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "b07c7ab7-54dd-489b-86f6-c2b56ef0548b"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: MUNrl8Ldy6dUR9emhHCs+rWufz3rEMbfqFkU0QPbcEI=
request-id                    : 32316c08-771c-4d10-981a-e3e59e5e7b2e
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
bmoBRPKl-yw01B5YEU0-tqroQTuA8pUG7wbR0YROAjeGkr5JroGDXqoj5OJMjqfK60Xo3oe5Na8pz-GKnztlxGvLoQgUcZELewZcjJ7N9XZag2d76zqz7oi
ObaIMAEiU.KT3P7pu--ZZ1485E_FRV5DHf1U3N2QlAlrIHO5Bra-E
Duration                      : 578141
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:27:59 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "32316c08-771c-4d10-981a-e3e59e5e7b2e",
    "date": "2021-04-14T18:28:00"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "e2d9c419-4c3f-49ca-b720-4ac8b455f5dc"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: 3XwRsQd1WIDyjqKUYy6eNB38PoKQxtV3K/avNMrnslU=
request-id                    : 10d81a64-ed72-401f-a84a-4a3fcdba7fa8
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
FtQHnl4MmXy6Y3msovLsPuFZ7SJQIgf351pn3oaTPGauegnuPOCx3TkNNSl9ETLTLAYormdzbRSdVjaL5pHG9FhKZBn6daB_yFayu7wbLy-T6G7bIrhp3vI
PIAYEildz.ZRieNPSYq0y3YIES5M8CiIn5vWhTRL3qmd2v6P-X-Yk
Duration                      : 674726
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:00 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "10d81a64-ed72-401f-a84a-4a3fcdba7fa8",
    "date": "2021-04-14T18:28:00"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "1f7f3d8b-374e-4333-a706-3f5502fd5cb7"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: 1eHLB31siNYrpOmUgDpc8aHKgb6oKjOSFFuFQY4R5mQ=
request-id                    : 5818e26a-7251-425a-8b0b-cb2b262d5bca
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
xWd_D_1Wyi5WgZfL7p8DSstqnjBfcdtT5Qf0RpNxZExwToK5hcHx7W3jR-BH8O6ZGh3Y6j0jOuWn3IJm1fnEXlr2EJRL-hZDiO4fRxfR687977F9eBN6Yy8
9qAsiB_67.hiLE2GN0mO9vbBQ8lWmIgznTYx6GmafDXAeS7dKTsuY
Duration                      : 567118
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:01 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "5818e26a-7251-425a-8b0b-cb2b262d5bca",
    "date": "2021-04-14T18:28:01"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "90da58b1-b661-48be-bc0e-e07acee7851e"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: wnyeKyW8yRYmUaMciHuTNKBX7Yagmx1EpQ0leWH37TI=
request-id                    : aa036051-c20e-4d2a-849d-366626e14c45
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
EcQbc_J9wqXqH5eKYTIFvO_A_syy1PpWNA1m3CCWRovzVoeJdTaJLGwv2wwZRHYEtounfpOR3V8UPEW58Wj4-jliAWQZ0RFENrwblmGKSFjcaAhglLzTuTM
QpBeNKLHa.H_GEPAMZLKVYO_H06L5sRvu7vg5E4RUQ21T96SYnG1M
Duration                      : 567752
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:00 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "aa036051-c20e-4d2a-849d-366626e14c45",
    "date": "2021-04-14T18:28:01"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "9b8db8eb-f13d-4672-a214-435339efe681"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: PMfSl9sY892abylgU2kGWXzeoCCF9mr388rWt1w7+hM=
request-id                    : 1f093f70-8c1f-4f2f-8c88-a89553177959
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
Cug7hFl1Sxqix4RMj9UVjI5CEcVDZ6DgRse8qnrMbhqb_WQJaNGNE4dr6E45K56owCFKH4Sk7BHXghlA2GYxehfRW6GSY-lYNWaQYopKeiSpRsFtts9k6vV
IEb-kDJGe.jK6G6kg0dPK6iCK5VoP9ypEtyASZa_VY04I97i5FFD8
Duration                      : 515893
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:00 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "1f093f70-8c1f-4f2f-8c88-a89553177959",
    "date": "2021-04-14T18:28:01"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "18cc4cd1-5dd8-4743-b6a4-7d0466dcd3e0"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: 79A8yiwlQSrNevKqx6Lk16macjIsOB/YZd3UaYgXnCI=
request-id                    : e2407095-0c6a-4ad9-a2d6-efd025a1f7ed
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
XPR1phczPnHi6Z3Mpzo0oqHxTvd7YTMLtR5_Ar-MEhXQWmMRO7uDvXpZnfWeYnqaGvun6z5Xdbo1Owm1zm_1uCNwrG65fT4-H-zNHYYkHiwune-PB3_UcPV
HNPYNYuUZ.20BphUIIwsfV2BdhNAM_j-Ec1W4vZVuj6LB5mOdbDEc
Duration                      : 552359
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:00 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "e2407095-0c6a-4ad9-a2d6-efd025a1f7ed",
    "date": "2021-04-14T18:28:01"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "90556f3f-b7fd-4d63-ba8a-0814a598c648"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: d4zh1c7/8d8XwlGzzJb8foxcQMQeaSQjr9CKVMoB8/c=
request-id                    : d186d3ac-6fde-4e87-8e73-4db40fcad755
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
KIOninMvx4CZ8wDEMFUmP70Vza0UZn9ESJG0OPg1Xjttjv3PeB_-w7ZGPd680sDQ0v9V8bMHjs34wvz4Jd7xTvAD5FMEFVDJM36C-SGQkd1HUFwFuMIZOiv
2kg8jzTND.Prd71LPRjImi6r2dOsLvnWEe_1ZQxv0YJWWHMv_NTFc
Duration                      : 693343
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:00 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "d186d3ac-6fde-4e87-8e73-4db40fcad755",
    "date": "2021-04-14T18:28:01"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "7a3f750a-63d3-430d-980e-ec920feddaa3"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: VeBXVRX13hvOD01XPVMz/DSQ/AzG9wHywMMm7vSzYVw=
request-id                    : fd3726c8-6540-4006-bb4b-e954eb28d121
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
wy1TLAIWKiC4lZmiykZNa4KRH4KkulQ4JkuOUM4QjCLrneqPSndL00CiGAqlg2m8Eq8uSftb2x38ca91tHbOyoxUx4prXU47BBT3y8D9uqHS6onfE5k4O6w
vqoB8Kbdv.ZUdN8vTf9hrsvlY1n1tALrrlpgcojLw4WlXp8TBZGWI
Duration                      : 1752401
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:01 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "fd3726c8-6540-4006-bb4b-e954eb28d121",
    "date": "2021-04-14T18:28:01"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "1f7beeb0-dcef-4aaa-8e18-32c99d8d9f87"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: 8EHU1HQiOMBLlM5j/FYDZS5vK4/GU7+vdV30S+U1RQU=
request-id                    : 502421ed-55da-43db-95ec-994f4c870c07
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
MCbuZ6KLYT1Vn1RfoQjWmSYHNmlTXdm8s98X6KQ4boktkwTfovQttSB4Ocrl6TmIo6ELtPCmPfG8wX9bhDQ20UALSrI6Ay8Vs_1kJLYGUnBk2hyxLjoFM1V
6I7Pwbi3O.7YlZB-IK04ygxPcn6B1mORaftDU-P9-DeU8D8_YX1uc
Duration                      : 564463
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:00 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "502421ed-55da-43db-95ec-994f4c870c07",
    "date": "2021-04-14T18:28:01"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "c422c27a-1897-49d8-89be-1a5642c28f52"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: o3Xdbo+YhqC8V1Y3vQDotvFBz9T2BbMzqUAxLkFTBro=
request-id                    : d48745cc-cdcb-4fc1-afb7-4355443afa29
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
m21efdy0p4kIF2ArpliNoCtMQeLDq44dkvFOz8wqVPCdBY0_KL-VoC_RBR4VykDO6ztJgq8kW_e7NmNwlJXceAFfr-a0BmfjzTEbW-VkxNOTbl3AJdAoYZI
Npesb-G2D.lPdJKByAPhsgbD_PTxHjHwbfvyVqM7u3bUw93fRiZ4c
Duration                      : 1195738
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:01 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "d48745cc-cdcb-4fc1-afb7-4355443afa29",
    "date": "2021-04-14T18:28:01"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "7ee64a8c-dd99-45a8-8122-9eafb1ead584"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: 7R5uPlbwlFRTY6VehPuGD4aEC/JG6i00D1xgNJEJ1RQ=
request-id                    : 7085be16-b877-4d01-ab3d-39331ef2be6f
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
K8CzKKnqqKJWvviimrlxBZrepJsuvfLeiqvzH9v2YL53ni-WsvuaZykt1TArWD9Vfzs2KCXzcMlPamisfrD-lfsp6xOPq9Hpqew7erPuHqjDKls9sayPsRF
PKWcpiwvU.Me7mI6M74M8LCJA-uvlu4ByXgqhJDhIpPkvD7kbtgEo
Duration                      : 546388
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:01 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "7085be16-b877-4d01-ab3d-39331ef2be6f",
    "date": "2021-04-14T18:28:01"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "6bfa8fd2-1599-4bd4-94eb-e85f425c214f"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: 5xvDdR/5n9tRHZ7PxakFfeMlE3is38ms8rzozj5pwnE=
request-id                    : 3c42a2c6-55f2-42f0-898e-b36634c24d81
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
JPJDsfN9fnbymSK77ZsEvt4gM2a4H53YOgddlWISL9VdHNkvn8-6Hh5itcfVgZixN9Vo5ba-Nd0-1hsZNbuCtRtYJSmcXOl4HXEt7-cd8sUhnBMDH9DZlM7
e0VHsPuXI.CQpFl-Hw9jBypOTkzEBjMradAKDLTUuHi8hDjCFV0RI
Duration                      : 534666
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:01 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "3c42a2c6-55f2-42f0-898e-b36634c24d81",
    "date": "2021-04-14T18:28:01"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "eeab76a5-1bf2-4e58-9b6f-5537755a2609"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: yg8EDcJwWHKjdw4vLRSNBZPG8b1j/T3Nz79fs5aggyE=
request-id                    : 786b2cd0-c422-4772-b4e8-76d811cd0255
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
vZt_ZfbW_XEjtWYwxZJ323EztXxRNTQi55uq4lA87g-xGLRFzXxnfYCWLGcGl1856KzLz21_RlF2gGsKryMaqa0BVOELCmVlsoBmo5IYwXQmDgGLMhEf5IC
OvhjbLzFJ.xgK0lxCDj8D3_erSNwTUVRwQPTr8zWSAcEReXK4Jp9Y
Duration                      : 644450
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:01 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "786b2cd0-c422-4772-b4e8-76d811cd0255",
    "date": "2021-04-14T18:28:01"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "9b77517b-bab8-4b7a-90ff-e28acd5d79be"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: k7nYwnEQE0QCOTJ+NbtVjiGEinVAYCBQiRDBhGyvtxM=
request-id                    : 02020b68-b09c-456b-9b3f-6cf3fe5e114d
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
nhJ19hTuTrMNZCOKpP5Et8gLEDbyezJGY9Eoh7nRgeEfZ6DIN9wYd1_HMNYXdvgn536i4X8zNoQh7LMmqNUfUSEziTDB2rkV1Najz3MssMKrEVKDFPEzK9C
z-Z4oR_EA.E7q2217lTCr0geKBv1HnSkX4FYAxZg_zOXL2Fx9sy4s
Duration                      : 589066
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:01 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "02020b68-b09c-456b-9b3f-6cf3fe5e114d",
    "date": "2021-04-14T18:28:02"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "fde1d395-7018-4cb5-8a48-620ae6b53ccb"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: ZbeSBxhYFJEUwZ1Xtq9pKMBxu1DLoHZzcHo7oyuiHSc=
request-id                    : 0bdd2e02-b00a-4885-9bda-e6cb992b3696
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
72yQRNajxwFGATMmyqhFI3LFJHsAhFhPvbuMFT8lFrvg45IyFxye6YPzmR-CcBD1vJANB4Zy9Ch2E_7NUHMIb1K_eHq1exWWYResrR6bOoHx4SvcsduNE8l
ACNLVYkbA.6yTWer4jYt-DnhqFl0XmKQjvIU9vHO8vnbusSRTfawo
Duration                      : 610830
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:02 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "0bdd2e02-b00a-4885-9bda-e6cb992b3696",
    "date": "2021-04-14T18:28:02"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "a49cff5c-56c0-439a-86a2-69c2f7bdde2a"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: a+43ITipTg4XAmuIUqV424iUfmHo4J1vCQzsmlQCeZ4=
request-id                    : 09962cf3-04d2-464b-b420-388d1ff9437e
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
O6RYEBZRLOG57c2PvfISuMyfZpdH-TLhWLSAmzgcXjrBlFGBy9CEwwu1K-oHbqH1AMLnJbhDkdV-_QQnmzbzCjSJ-02bke4-QXaXsUByTRWT3FRI1z3lAED
XzerqCSaJ.I9iRAk_z_YM9pVqNdIkjxWNeTwKQEAB8mVTCVCWRHsw
Duration                      : 558023
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:02 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "09962cf3-04d2-464b-b420-388d1ff9437e",
    "date": "2021-04-14T18:28:02"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "309bcc54-1ccc-4416-9ecd-5f779369756e"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: XVWbdHXZHJpu1nFWnmkhdfoLioqBhGuyVrsEt7VkIwM=
request-id                    : a522ec96-9296-456f-9dd2-6bc444be7827
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
520GqCrT0C2R4YyKrImAcrME2kIxXGU0cYeGcfWpQdsCIo0Q5V8FYTJu6JHZSpAhJ0jMDQQRlC_UJESMgDcT3vZH3k3xjvNipEQWi44x5VsAok745SIeAal
ABoqPgFM_.eapfT4WNDV225oLco2-XI63LIyw5dA8e6u0QS4qoz0I
Duration                      : 676730
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:02 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "a522ec96-9296-456f-9dd2-6bc444be7827",
    "date": "2021-04-14T18:28:02"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "6736da64-42c1-4bc9-b38b-7b326347756e"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: 8PIy7MAz0X2AZifx2eCvTsgcS5Jc06aRwrzX0cPAK9M=
request-id                    : c0a0f138-a30a-4b35-9e1f-9346a70f3fa5
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
a0cOOuntu49A-2EXcZ6LfKrpzWkgqrezOZ9R4BUpTg3lnQYWhVUvu6QZxlMnHT4xM2Sr3NQcxmog6KlwJGuqmoM5-466R2fJ7XzvcinJoWZuKYdaAIPffOZ
4h8xHGrYI.RY1n-0HbjWZs6x-iejRcxYYuOG5wingR_j6yp1wB0jE
Duration                      : 530481
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:01 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "c0a0f138-a30a-4b35-9e1f-9346a70f3fa5",
    "date": "2021-04-14T18:28:02"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "ee08cf77-01f0-49c6-b795-11c95de18c43"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: C7vkDp1fJI7ADhXtPA0HD6NtY1Wdm43W2RKkkRpoggo=
request-id                    : 13e5c048-bbc7-4f48-8a60-2e0c80bd77f9
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
es0QDIemCFNYqmsZxFipF4n6Wsb9qr34c_DL7yBFQUhN7EEztyreMm7PxlsFrKv7IIwra-Q56VKwRLha9cJyXXPrhCfxhLdfC6JkDATyzIumrGjx35F30X0
FCl4RqqQt.YzRIfHW8GbLzXalxMgftSioXSk0rOvFcfzEe4EsjNdM
Duration                      : 588697
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:01 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "13e5c048-bbc7-4f48-8a60-2e0c80bd77f9",
    "date": "2021-04-14T18:28:02"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "5a14fb09-136a-41f0-9683-3643bd59717a"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: 59myZKlqd2aVfUpQWt364lByt/cl5K7drWj1zB0XMIk=
request-id                    : 2b8df85f-b7e3-49b8-8f4e-5588787012bc
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
9_D7BdAD8jH8QKHgfi2XY-8YlFYwwq_nCho1CwCDhSh0Mf92VNz4ZQH1f0NtgKfxxbwMYad6who_pggyMnK0Vz-ZQ_ynSM6h37zqgVemDXiFJWaFOb_pvPc
jr5E8RjKT.wexpFO-Xk2Webg4xMCG-kwQAlwlCjmHMgIK0UT9Jtvw
Duration                      : 606495
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:01 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "2b8df85f-b7e3-49b8-8f4e-5588787012bc",
    "date": "2021-04-14T18:28:02"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "3cc91c28-2bb3-4ecc-99fc-35f6206c0c72"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: jlNiZSeCriDfGSBeUGgOpiF0QF5kfgM6J/uiNaQGoNY=
request-id                    : 65a2d9bd-d2fe-4c75-b5c0-66f021507a23
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
Kqq8UcQqQQWHd4Yp3FsS6QoiUrGdnbHgSUJLxIB2HaParqCjF-S7TXT73eSes1ikXUZ2MwlAoD95f9E0aV_oz_3eYObbX2pb9DP1fkZmXCnCh8GxjsQKCh2
uDh7sHGAk.9k8RGtqQ5XoPJ2n48F_wxs0-FtuKuAqEatOl4kw2eLQ
Duration                      : 553847
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:01 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "65a2d9bd-d2fe-4c75-b5c0-66f021507a23",
    "date": "2021-04-14T18:28:02"
  }
}

DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://graph.windows.net/***/getObjectsByObjectIds?api-version=1.6

Headers:
x-ms-client-request-id        : b1b434e2-cb24-4aa7-b435-57244f620a30
accept-language               : en-US

Body:
{
  "objectIds": [
    "f33833ec-c890-43d5-86f9-290ab58abe11"
  ],
  "includeDirectoryObjectReferences": true
}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
Forbidden

Headers:
Pragma                        : no-cache
ocp-aad-diagnostics-server-name: +up98squ7hnc6r7ll4xkJhHTCMVloczb4kaiM1E3aYY=
request-id                    : 4b1ec5b8-e787-4db4-b433-b88854caf32c
client-request-id             : b1b434e2-cb24-4aa7-b435-57244f620a30
x-ms-dirapi-data-contract-version: 1.6
ocp-aad-session-key           : 
KCiYxp9-8xzoWQjgFDNqkPE6yF-ctRGeIS9wO1rur-f40RFWvpoZS0JBlQwnedgeKlCoE9MP7sUIO8A9gRc2uYAH2BgZOQVZTSFPoA1m6tWBklqyYA_e0OK
Q6IFYTdwu.KjD50-AqnNpHalavdvbeDLUGhg-WfRR4rK8aUK4iFj0
Duration                      : 556561
x-ms-resource-unit            : 3
DataServiceVersion            : 3.0;
Strict-Transport-Security     : max-age=31536000; includeSubDomains
Access-Control-Allow-Origin   : *
Cache-Control                 : no-cache
Date                          : Wed, 14 Apr 2021 18:28:02 GMT
X-AspNet-Version              : 4.0.30319
X-Powered-By                  : ASP.NET

Body:
{
  "odata.error": {
    "code": "Authorization_RequestDenied",
    "message": {
      "lang": "en",
      "value": "Insufficient privileges to complete the operation."
    },
    "requestId": "4b1ec5b8-e787-4db4-b433-b88854caf32c",
    "date": "2021-04-14T18:28:02"
  }
}

DEBUG: AzureQoSEvent: CommandName - Get-AzKeyVault; IsSuccess - True; Duration - 00:00:04.0273242
DEBUG: Finish sending metric.
DEBUG: 6:28:03 PM - GetAzureKeyVault end processing.

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 9592062e-3299-47b9-9260-f495555aef39
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 3589d868-742f-49ed-903b-7d0bc7ec9e7c
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 2416c31e-a29d-44cf-8e94-50547f0bf6e3
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : d5a568c2-801f-4302-a379-a130ad8c11f0
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 21a6b3e3-f024-436c-9ded-c96da08ffdf3
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 51598598-89a2-4313-b438-a319e9e2920a
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 200ef4ae-85a8-437b-a912-4f379d895399
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 062a1eda-d72f-47a2-92bc-66381ad43b85
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : f141f16b-f4d7-4212-922e-49db5ffa8d90
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : b07c7ab7-54dd-489b-86f6-c2b56ef0548b
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : e2d9c419-4c3f-49ca-b720-4ac8b455f5dc
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 1f7f3d8b-374e-4333-a706-3f5502fd5cb7
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 90da58b1-b661-48be-bc0e-e07acee7851e
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 9b8db8eb-f13d-4672-a214-435339efe681
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 18cc4cd1-5dd8-4743-b6a4-7d0466dcd3e0
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 90556f3f-b7fd-4d63-ba8a-0814a598c648
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 7a3f750a-63d3-430d-980e-ec920feddaa3
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 1f7beeb0-dcef-4aaa-8e18-32c99d8d9f87
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : c422c27a-1897-49d8-89be-1a5642c28f52
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 7ee64a8c-dd99-45a8-8122-9eafb1ead584
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 6bfa8fd2-1599-4bd4-94eb-e85f425c214f
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : eeab76a5-1bf2-4e58-9b6f-5537755a2609
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 9b77517b-bab8-4b7a-90ff-e28acd5d79be
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : fde1d395-7018-4cb5-8a48-620ae6b53ccb
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : a49cff5c-56c0-439a-86a2-69c2f7bdde2a
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 309bcc54-1ccc-4416-9ecd-5f779369756e
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 6736da64-42c1-4bc9-b38b-7b326347756e
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : ee08cf77-01f0-49c6-b795-11c95de18c43
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 5a14fb09-136a-41f0-9683-3643bd59717a
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : 3cc91c28-2bb3-4ecc-99fc-35f6206c0c72
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      : 

TenantId                     : ***
TenantName                   : ***
ObjectId                     : f33833ec-c890-43d5-86f9-290ab58abe11
ApplicationId                : 
DisplayName                  : 
ApplicationIdDisplayName     : 
PermissionsToKeys            : {Get, List}
PermissionsToKeysStr         : Get, List
PermissionsToSecrets         : {get, list}
PermissionsToSecretsStr      : get, list
PermissionsToCertificates    : {get, list}
PermissionsToCertificatesStr : get, list
PermissionsToStorage         : {}
PermissionsToStorageStr      :
BethanyZhou commented 3 years ago

Hi @brphelps , the detailed information (including DisplayName) of Access Policy is answered by https://graph.windows.net/***/getObjectsByObjectIds. As error message shows, your service principal has no permission to access it. Please authorize your service principle to call Azure Active Directory Graph API. Thanks for reporting.

ghost commented 3 years ago

Hi, we're sending this friendly reminder because we haven't heard back from you in a while. We need more information about this issue to help address it. Please be sure to give us your input within the next 7 days. If we don't hear back from you within 14 days of this comment the issue will be automatically closed. Thank you!