-
Notifications
You must be signed in to change notification settings - Fork 54
Description
Hello,
I am Global Admin of a client of us and try to use this script.
After consensing the permissions i still receive HTTP/1.1 403 Forbidden.
This is the complete error i receive.
`Invoke-MgGraphRequest : GET https://graph.microsoft.com/beta/groups?$filter=displayName%20eq%20'AzureHomeDeployments'
HTTP/1.1 403 Forbidden
Transfer-Encoding: chunked
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
request-id: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
client-request-id: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx
x-ms-ags-diagnostic: {"ServerInfo":{"DataCenter":"West Europe","Slice":"E","Ring":"5","ScaleUnit":"003","RoleInstance":"AM1PEPF0002839F"}}
x-ms-resource-unit: 1
Cache-Control: no-cache
Date: Thu, 17 Aug 2023 08:34:08 GMT
Content-Encoding: gzip
Content-Type: application/json
{"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2023-08-17T08:34:09","request-id":"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx","client-request-id":"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxxxxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"}}}
At C:\Program Files\WindowsPowerShell\Scripts\Get-AllAadGroupAssignments.ps1:55 char:17
-
... return (Invoke-MgGraphRequest -Uri $uri -Method Get -OutputType P ...
-
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~- CategoryInfo : InvalidOperation: (Method: GET, Re...0bd52496aad1
}:HttpRequestMessage) [Invoke-MgGraphRequest], HttpResponseException - FullyQualifiedErrorId : InvokeGraphHttpResponseException,Microsoft.Graph.PowerShell.Authentication.Cmdlets.InvokeMgGraphRequest`
What permissions are missing here?
- CategoryInfo : InvalidOperation: (Method: GET, Re...0bd52496aad1