SCCM_AZUREAD_DISCOVERY_AGENT

Question

Azure AD Discovery agent does not have permission to access Azure active directory and will retry at next interval. Please check that Azure AD application is properly configured. Insufficient privileges to complete the operation..

Answer 1

Getting this error. I see that Azure has the right permissions

Answer 2

Hi @Tyson Schuller ,

Use the SMS_AZUREAD_DISCOVERY_AGENT.log for troubleshooting. This log is also shared with Azure AD user discovery.

Besides, to check if enable discovery on an existing Cloud Management Azure service, please check the following article:
https://learn.microsoft.com/en-us/mem/configmgr/core/servers/deploy/configure/configure-discovery-methods#enable-azure-ad-user-group-discovery

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.