App Registration - The remote server returned an error: (401) Unauthorized

Question

I have registered an app in Azure and using the service principal to authenticate to the app, and get a listing of all Azure AD groups.

The permissions granted to the app are as follow:

And the PowerShell code is as follow:

I have tried almost everything but it is still giving me an error message saying that "The remote server returned an error: (401) Unauthorized."

Can someone please help me understand what I am doing wrong here?

Answer 1

Hi @Rameez Ali

I see that you are using ClientID&Secret which is a system to system call instead on sign-on user context. Can you please try following Graph permissions and share the result?

Permissions "Group.Read.All"
Type "Application"

You can also replace other permissions TYPE as "Application" instead of delegated. Following article outlines different about API types:

https://learn.microsoft.com/en-us/graph/permissions-reference#group-permissions

https://learn.microsoft.com/en-us/graph/api/group-list?view=graph-rest-1.0&tabs=http#permissions