Azure function (PowerShell) - IDX12729: Unable to decode the header '[PII of type 'System.String' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]' as Base64Url encoded string.

Question

I am using an Azure function with the PowerShell language. I would like to get a specific M365 group from entra Id. I am using the pnp PowerShell module. I got the error:

IDX12729: Unable to decode the header '[PII of type 'System.String' is hidden. For more details, see https://aka.ms/IdentityModel/PII.]' as Base64Url encoded string.

This is my PowerShell command:

Connect-PnPOnline -Url "someSpUrl" -ManagedIdentity $site = Get-PnPTenantSite -Identity someSpUrl" $m365Group = Get-PnPMicrosoft365Group -Identity [System.Guid]$site.GroupId

Why do I get this error? How can I fix this?

Answer 1

Hi @Khalid Hajjouji,

Below approach worked for me to retrieve Microsoft 365 Group :

Firstly, created a function app in Azure. Later Enabled Managed identity as below:

Below is my function app code:

run.ps1:

using namespace System.Net

param($Request, $TriggerMetadata)

Connect-PnPOnline "m3542.sharepoint.com" -ManagedIdentity

$site = Get-PnPTenantSite -Identity "https://m3542.sharepoint.com/sites/DemoSite" 

$m365Group = Get-PnPMicrosoft365Group -Identity $site.GroupId

Push-OutputBinding -Name Response -Value ([HttpResponseContext]@{

    StatusCode = [HttpStatusCode]::OK

    Body = $m365Group

})

requirements.psd1:

@{

'PnP.PowerShell' = '2.0.45-nightly'

}

The profile.ps1 should be empty:

Then deployed to Azure.

Now, Given Share Point Admin Role for the function app:

Also have below permissions:

Output:

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.