The Graph connector agent has failed to register due to insufficient permissions

Weird, I can query the App in Microsoft Graph Explorer by Object ID and it even returns the App ID but I cannot query the App by the App ID from the Server with the Connector .....

I added "Cloud Application Administrator" to the Registering Accounts Role and still the same error ...

Hello,

I already granted the App the following API permissions:

And the account used to register the Connector has the following permissions:

Please assist or escalate accordingly.

Hi Kevin, the error is coming up because the app you created in Entra ID (Azure AD) doesn’t have the right Microsoft Graph permissions needed by the Graph connector agent. Even if you already added some, the agent specifically requires ExternalItem.ReadWrite.OwnedBy so it can create and update external items, and Directory.Read.All so it can read directory ACLs (needed when connections use Access Control Lists). You’ll need to go into the app registration, add these API permissions under Microsoft Graph, and then make sure you grant admin consent. Without admin consent, the permissions won’t actually take effect. Once that’s done, restart the agent registration and it should work.

🔗 Relevant Microsoft docs:

• Set up Microsoft Graph connector agent
• Microsoft Graph permissions reference
• Grant tenant-wide admin consent to an application

Thanks,  

Karan Shewale. 

*************************************************************************  

If the response is helpful, please click "Accept Answer" and upvote it. You can share your feedback Microsoft Copilot Developer Community Response Feedbacklink. Click here Escalation for Microsoft Teams Developer Community response

 to escalate.