Azure AD user provisioning with G suite

Rahul Kaim 21

Hi Team,

We are facing some issues on Azure AD user provisioning with G suite below is the error

"Not Authorized to access this resource/api" } ], "code": 403, "message": "Not Authorized to access this resource/api" } } Web Response: { "error": { "errors": [ { "domain": "global", "reason": "forbidden", "message": "Not Authorized to access this resource/api" } ], "code": 403, "message": "Not Authorized to access this resource/api" } } . This operation was retried 0 times. It will be retried again after this date:

1 answer

Saurabh Sharma 23,816 Reputation points Microsoft Employee

2020-05-06T23:52:19.487+00:00

Can you please provide more details - What exactly you are trying to achieve and at which stage you are getting this error ?
Please sign in to rate this answer.
Saurabh Sharma 23,816 Reputation points Microsoft Employee

2020-05-08T16:21:15.343+00:00

Just checking in if you are still having issues ?

Rahul Kaim 21 Reputation points

2020-05-11T08:29:54.603+00:00

@Saurabh Sharma we are doing auto-provisioning from Azure AD to G suite app.

We assign users in provisioning scope which then creates users on G suite app. For few users we are seeing below errors on audit logs of provisioning app.

Can you please suggest we can see below error on provisioning audit logs for some users. We sync users via groups scoping from Azure ad to G suite application

Details details: Skip reason = UnableToResolveReferenceAttributeValue, Active = ?, Assigned = ?, Passed scope filter: ?;

There is no much information to see why it is skipping, all mapping is correct as other users are also getting synced without any issue.

Saurabh Sharma 23,816 Reputation points Microsoft Employee

2020-05-12T18:19:33.647+00:00

@Rahul Kaim Can you please check if any member of the groups are in disabled state. If they are then the user will need to be removed from the group, then re-added to the group in AAD. By doing this, a change to the group membership is triggered and on the next delta sync the group memberships should populate again for that user.

Rahul Kaim 21 Reputation points

2020-05-14T19:12:53.717+00:00

@Saurabh Sharma

thanks for the input, they are in enable state however we remove from the on-prem group and then put them back to the group. That resolve the above issue user skipped.

But I am wondering what could be the cause here?

Saurabh Sharma 23,816 Reputation points Microsoft Employee

2020-06-10T01:00:22.69+00:00

@Rahul Kaim Well, not sure about that. Something might be with the environment. But good to hear that it is resolved.

(Please don't forget to accept helpful replies as answer)
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Azure AD user provisioning with G suite

1 answer

Your answer