Error: Could not retrieve Global Service Principal ID Error: Error: {}

Question

When I want to approve the requests in the API Access I get following error:

I followed this article (https://ericschrader.wordpress.com/2020/06/23/sharepoint-online-bad-service-principal-breaks-sharepoint-admin-api-access-global-service-principal-id-error-resolved/) and deleted the “SharePoint Online Client Extensibility Web Application Principal Helper”, but that didn't help.
I currently have the role as SharePoint Administrator (no global admin). Can this be the reason or how can I solve this?

Answer 1

Hi @Axelle Hillewaere - Savaco

The admin role that's required to approve permissions depends on the API. To approve permissions to any of the third-party APIs registered in the tenant, the application administrator role is sufficient. To approve permissions for Microsoft Graph or any other Microsoft API, the Global Administrator role is required. The API access page is not available for people signed in with the global reader role.

If you have globe admin role, you can go to Azure AD -> Enterprise Applications and remove Application Type as a filter and check if you have following 2 apps

• SharePoint Online Client Extensibility Web Application Principal
• SharePoint Online Client Extensibility Web Application Principal Helper

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.