Invoke-AADIntReconAsGuest failed

Gerenios / AADInternals

AADInternals PowerShell module for administering Azure AD and Office 365

http://aadinternals.com/aadinternals

MIT License

1.27k stars 216 forks source link

Invoke-AADIntReconAsGuest failed #34

Closed kinomakino closed 2 years ago

kinomakino commented 2 years ago

Tested on different tenants, recognition as outsider and insider works, but not as guest . is it a permissions problem in Graph?

_Invoke-RestMethod : {"ClassName":"Microsoft.Portal.Framework.Exceptions.ClientException","Message":"Graph call failed with httpCode=Forbidden, errorCode=AuthorizationRequestDenied, errorMessage=Insufficient privileges to complete the operation., reason=Forbidden, correlationId

thanks in advice !!!

NestoriSyynimaa commented 2 years ago

I assume the error is shown after prompting for the target tenant. In that case the target tenant guest user permissions are restricted. https://o365blog.com/post/quest_for_guest/#preventing