Comments (3)
No logic changes have been made to that resource in close to 2 months. Something else must have changed. What was the previous version of M365DSC you were using that worked?
from microsoft365dsc.
The export is failing on New-MgServicePrincipal
this is code for service principals that might be not yet created on the tenant, which they should, the reason why it's failing it's due to lacking Application.ReadWrite.All
to create those service principals, even during export.
from microsoft365dsc.
No logic changes have been made to that resource in close to 2 months. Something else must have changed. What was the previous version of M365DSC you were using that worked?
It seems that you are right. I finally found that the issue was not affecting all tenants but mainly the new ones and that it was due to this part of the resource code:
_$OfficeOnlineId = 'c1f33bc0-bdb4-4248-ba9b-096807ddb43e'
$M365WebEnableUsersToOpenFilesFrom3PStorageValue = Get-MgServicePrincipal -Filter "appId eq '$OfficeOnlineId'" -Property 'AccountEnabled' -ErrorAction SilentlyContinue
if ($null -eq $M365WebEnableUsersToOpenFilesFrom3PStorageValue)
{
Write-Verbose -Message "Registering the Office on the web Service Principal"
New-MgServicePrincipal -AppId 'c1f33bc0-bdb4-4248-ba9b-096807ddb43e' -ErrorAction Stop | Out-Null
$M365WebEnableUsersToOpenFilesFrom3PStorageValue = Get-MgServicePrincipal -Filter "appId eq '$OfficeOnlineId'" -Property 'AccountEnabled' -ErrorAction SilentlyContinue
}_
If the Office on the web Service Principal does not exist, the script tries to create it. As we are not allowed to have write permissions on the tenant that we audit I will do this upfront on my script that create the Entra ID app required for M365DSC.
from microsoft365dsc.
Related Issues (20)
- Request for a Filter Option for AzureAD Attribute 'AADGroup' HOT 1
- Experiencing memory issues when connecting to Exchange Online Management using C# HOT 2
- PowerShell DSC resource MSFT_AADSecurityDefaults failed to execute Test-TargetResource functionality with error message: Could not determine authentication method
- IntuneDeviceConfigurationPolicyiOS: NetworkUsageRules not exporting correctly
- IntuneDeviceConfigurationEndpointProtectionPolicyWindows10: Cannot compile if ProfileTypes (in FirewallRules) is present
- Minimum 'Azure (custom) role' / 'permissions' for O365 export
- Export-M365DSCConfiguration: had a failure when running with the Connecting to PnP step
- Assert-M365DSCBlueprint "Error: Cannot index into a null array" HOT 2
- How to extract details New-M365DSCReportFromConfiguration HOT 1
- Write-Host replaced by Write-Error for Azure Automation Accounts
- New-M365DSCDeltaReport - No discrepancies have been found HOT 10
- AAD - Custom domain names
- Test-M365DSCParameterState: Function can fail when calling Compare-PSCustomObjectArrays
- How come Roadmap/Backlog is stopped in Azure DevOps HOT 1
- EXOHostedContentFilterPolicy documentation has a bug
- ExoAuthenticationPolicyAssignment: Only returning 1000 users for each authentication policy when exporting
- EXOHostedContentFilterPolicy supports some MSFT deprecated settings
- M365DSCRuleEvaluation: Is not evaluated with Assert-M365DSCBlueprint
- All Conditional Access policies fail to be migrated with non-terminating errors during Start-DscConfiguration HOT 4
- What are the permitted values of [AADConditionalAccessPolicy]: TransferMethods ?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from microsoft365dsc.