Cloud-Attach is not enabled

Question

I have enabled cloud-attach in SCCM console to sync a Device Collection to Intune

However, my connector status is showing as Unhealthy since few hours now:

My ConfigMgr App has the following permissions:

I can see the following in my CMGatewayNotificationWorker logs:

[LocationRequest (unauthenticated)] Creating web request to: https://gateway.configmgr.manage.microsoft.com/api/gateway/LocationService Method: HEAD Activity ID: 35a1992e-d149-42ae-a573-c4633f021cd5 Timeout: 00:02:00 SMS_SERVICE_CONNECTOR_CMGatewayNotificationWorker 26-11-2023 17:47:24 148 (0x0094)

[LocationRequest (unauthenticated)] Response from https://gateway.configmgr.manage.microsoft.com/api/gateway/LocationService is: 401 (Unauthorized) SMS_SERVICE_CONNECTOR_CMGatewayNotificationWorker 26-11-2023 17:47:24 143 (0x008F)

Response status code: 401 (Unauthorized) Activity ID: 5263f78c-2af0-4ff6-94c8-0188032cc875 SMS_SERVICE_CONNECTOR_CMGatewayNotificationWorker 26-11-2023 17:47:24 143 (0x008F)

Note: I used a Global Admin account is purely a Cloud Account(and not an AD-Synced account) to authenticate while setting up Cloud-Attach.

Need to understand what permissions am I missing.

Answer 1

Hi,

Thank you for posting in Microsoft Q&A forum.

1,Are your Azure App's setup correctly? Refer to the official article:

https://docs.microsoft.com/en-us/mem/configmgr/cloud-attach/enable

2,Ensure Grant admin consent for Tenant is selected for the Microsoft Entra application. For more information, see Grant admin consent in App registrations

3,If possible, we could disable cloud attach, remove the app registration, and then re-enable cloud attach to have a try.

Thanks for your time. Have a nice day!

Best regards,

Simon

---

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Hi,

Just checking in to see if there is any update. We haven't heard from you for a few days and would like to know the current status of the problem. Is the problem solved? Do you need any further assistance? Look forward to hearing from you.

Thanks for your time.

Best regards,

Simon