search

almenscorner / intunecd-monitor

IntuneCD front end, monitor configurations and changes in Intune
MIT License
91 stars 8 forks source link

Error when deploying Intuncd-monitor: {"code":"PrincipalTypeNotSupported","message":"Principals of type Application cannot validly be used in role assignments."} #36

Closed danieldcn closed 6 months ago

danieldcn commented 6 months ago

When deploying the application via the deploy button and the custom Azure template I have observed the following:

If I'm understanding it correctly this looks like it's trying to assign the application ID to the key vault and something is failing. This doesn't seem to be causing a problem during the deployment as I am able to get load the UI. I'm wondering though if it's linked to another issue when I try to add a tenant in the IntuneCD UI.

{"code":"PrincipalTypeNotSupported","message":"Principals of type Application cannot validly be used in role assignments."}

image

almenscorner commented 6 months ago

This error occurs if you've entered the Object ID from the App Registration in Entra instead of the Enterprise Application Object ID during deployment. Either give your app the Key Vault administrator role on the resource group or redeploy providing the correct parameter

danieldcn commented 6 months ago

Using the Enterprise Application object ID instead of the App Registration did fixe the issue.