Get-MgDirectoryOnPremiseSynchronization : Insufficient privileges to complete the operation as the Global Administrator?

Question

What are the additional required permissions on top of the Global Administrator to execute the below read only command?

Connect-MgGraph -Scopes OnPremDirectorySynchronization.ReadWrite.All 

Get-MgDirectoryOnPremiseSynchronization

The error I am getting is:

Get-MgDirectoryOnPremiseSynchronization : Insufficient privileges to complete the operation. Status: 403 (Forbidden) ErrorCode: Authorization_RequestDenied

• Get-MgDirectoryOnPremiseSynchronization

•     + CategoryInfo          : InvalidOperation: ({ Top = , Skip ... , Headers =  }:<>f__AnonymousType13`9) [Get-MgDirectory...ronization_List], Exception
      + FullyQualifiedErrorId : Authorization_RequestDenied,Microsoft.Graph.PowerShell.Cmdlets.GetMgDirectoryOnPremiseSynchronization_List
  

Answer 1

Do you have a P1 or P2 license in the tenant?

Answer 2

@EnterpriseArchitect Apologies for the delayed response, as per this documentation - https://learn.microsoft.com/en-us/graph/api/onpremisesdirectorysynchronization-update?view=graph-rest-1.0&tabs=http the user needs to be assigned the Global Administrator role. Even after this role, you are facing the above mentioned error ?