Get-MgBetaDeviceManagementReportConfigurationPolicyNonComplianceSummaryReport throws forbidden

Question

Hi,

I am trying to use Get-MgBetaDeviceManagementReportConfigurationPolicyNonComplianceSummaryReport command and it is working when run using Global Admin account. But under Automation Account Managed Identity (service principal) with application permission mentioned in the official documentation, it is throwing a forbidden error.

I've tried to add several more permissions but no luck.

What permissions are really needed?

Answer 1

Hi @Andrew

Ensure that you have granted one of the following permissions to the calling app and have provided admin consent.

Additionally, you need to assign the Global Administrator role to your app service principal.

Hope this helps.

If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.

Answer 2

OK, it started to work. So someone in the MS had to fix this in the meantime.