Get-AzureADDirectorySetting - Authintication problems

Question

So I am trying to configure Sensitivity labels according to the documentation here - https://learn.microsoft.com/en-us/azure/active-directory/enterprise-users/groups-assign-sensitivity-labels

I currently am using a M365 GCC High tenant and according the the roadmap sensitivity labels are rolled out.

Following the directions it asked me to connect to Azure-AD and run this command - $Setting = Get-AzureADDirectorySetting -Id (Get-AzureADDirectorySetting | where -Property DisplayName -Value "Group.Unified" -EQ).id

I log in find but when I try and run the command I get the following error -
Get-AzureADDirectorySetting : Error occurred while executing GetDirectorySettings
Code: InvalidAuthenticationToken
Message: Access token validation failure. Invalid audience.
InnerError:
RequestId: 88c2acdd........
DateTimeStamp: Fri, 04 Jun 2021 18:07:50 GMT
HttpStatusCode: Unauthorized
HttpStatusDescription: Unauthorized
HttpResponseStatus: Completed
........

Answer 1

You need to ensure that your app is registered and the correct permissions are assigned.

Also, please make sure that your resource is set correctly.

If all of that is correct there might be a conditional access policy in place that is blocking the authorization.

Answer 2

Instead of "Connect-AzureAD", use "Connect-AzureAD -AzureEnvironmentName AzureUSGovernment"

This solved my issue.

Answer 3

That did the trick. Thanks!