ThomasKur / M365Documentation

Automatic Microsoft 365 Documentation to simplify the life of admins and consultants.
Other
300 stars 45 forks source link

Error obtaining AzureAD conditional access #50

Open amadeus916 opened 2 months ago

amadeus916 commented 2 months ago

Hi, Using delegated access and with the Policy.Read.All permission I failed to get CA documentation.

$doc = Get-M365Doc -Components AzureAD Used application does not have sufficiant permission to access: https://graph.microsoft.com/beta/identity/conditionalAccess/policies At C:\Program Files\WindowsPowerShell\Modules\M365Documentation\3.3.0\Internal\Helper\Invoke-DocGraph.ps1:62 char:13

Getting my tokens permissions show Policy.Real.All

scp : AccessReview.Read.All Agreement.Read.All AppCatalog.Read.All Application.Read.All ConsentRequest.Read.All Device.Read.All DeviceManagementApps.Read.All DeviceManagementConfiguration.Read.All DeviceManagementManagedDevices.Read.All DeviceManagementRBAC.Read.All DeviceManagementServiceConfig.Read.All Directory.Read.All Domain.Read.All Organization.Read.All Policy.Read.All PrivilegedAccess.Read.AzureAD PrivilegedAccess.Read.AzureADGroup PrivilegedAccess.Read.AzureResources User.Read profile openid email

Trying the same in the web I see that is the only permission required

image

amadeus916 commented 2 months ago

Same issue after excluding AADConditionalAccess this time with Identity providers

Used application does not have sufficiant permission to access: https://graph.microsoft.com/beta/identity/identityProviders At C:\Program Files\WindowsPowerShell\Modules\M365Documentation\3.3.0\Internal\Helper\Invoke-DocGraph.ps1:62 char:13