How to fix 403 Forbidden: Microsoft Graph API

Question

Hello,

In the attached image you'll see a request I made to get an Intune device configuration policy, I followed all the documentation on Microsoft's website. I created an app in Azure and giving it the correct permissions to reach the Graph API, as a Global Administrator I was able to approve those permissions for the application and the Graph API. I then made sure the Graph environment variable was update with the correct app authentication information. Yet still I receive the 403 Forbidden error and I cannot figure out why. Any help would be very appreciated.

Answer 1

Hi @Drew Burgess

According to the error message on the picture you provide, the error is due to the lack of DeviceManagementConfiguration.Read.All or DeviceManagementConfiguration.ReadWrite.All permissions, Please try the following code:

Connect-MgGraph -Scopes "DeviceManagementConfiguration.Read.All"

More details can be found at this link:

https://github.com/microsoftgraph/msgraph-sdk-powershell

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.