SAP-samples / btp-bridge-framework

Create a Microsoft Teams extension app to SAP S/4HANA with JSON configuration.
Apache License 2.0
5 stars 5 forks source link

Error: Updating service principal with object ID: "8ddb7d65-9945-4e22-8d0f-40f34194d252" MS Graph #13

Closed ABVN-Huy closed 1 year ago

ABVN-Huy commented 1 year ago

Hi team,

I am Huy from ABeam, I am using terraform version. After run ./btpsa I got error as below image

I also found in azure-ad-app/main.tf file these required roles image

In Azure portal, I just guess that my account should be assign to MS Graph application and have above roles image

image

image

I am not sure about it as my Azure account is managed by admin team and I need to request. Do you have any advise or sample for Azure portal set up (screenshot is ok) ?

viancu commented 1 year ago

We were able to replicate the issue by removing the following roles: "Application Administrator" and "Global Administrator" (Directory Scope).

For the current set up, these roles are required, but if obtaining these permissions is not possible, a manual approach might have to be followed. The documentation also contains the manual steps here.

Hopefully this answers your question, but please let me know if I can provide further guidance.