How to resolve AADSTS650053: The application 'identity-client-app' asked for scope 'AllSites.Manage' that doesn't exist on the resource '00000003-0000-0000-c000-000000000000' error

Question

I'm working on a mini project where a middleware handles leave requests submitted in SharePoint. To achieve this, I created an identity application on Azure and add permissions to the API. I then tried to access SharePoint after providing credentials like 'Client ID', 'Client Secret', 'Tenant ID' and 'SharePoint URL' but got the following error:
AADSTS650053: The application 'identity-client-app' asked for scope 'AllSites.Manage' that doesn't exist on the resource '00000003-0000-0000-c000-000000000000'.

I have also removed the 'AllSites.Manage' scope and replaced it with 'Sites.Manage.All'. But I still get the same error.

How do I resolve this issue?

Answer 1

The error simply means that there is a permission mismatch- the permissions your application is requesting and the permissions available on the target resource do not match.
The application is requesting for a scope-AllSites.Manage which is a SharePoint Permission. Hence it is trying to get this permission from Microsoft Graph API which does not have equivalent SharePoint permissions or rather the scope name is not equivalent.
To resolve this-identify the appropriate Microsoft Graph Permissions using the Permission Reference here- https://learn.microsoft.com/en-us/graph/permissions-reference#sitesmanageall and then retry the scenario. Ensure that Sites.Manage.All is admin consented is App permissions. If you have code ensure that the scopes requested in it match what you have configured on the portal.