Troubleshooting administrative consent in Microsoft 365 extension
Overview
When you set up your Microsoft 365 extension in Cayosoft Administrator, it is required to register a dedicated application in your tenant to access and manage the tenant data using Microsoft Graph API. When your register the application, you must grant admin consent to allow the application to perform read and write operations. This article describes troubleshooting scenarios for possible Graph API and admin consent errors.
Scenarios
Symptom #1
When you run the Analytics collection | Microsoft Office 365 rule, the rule report contains the following error:
Access denied: Administrative consent to use Microsoft Graph API has not been granted.
Please go to Cayosoft Console > Configuration > Microsoft Office 365 > Admin Consent, to grant it this permission.Resolution #1
Verify that you have granted consent in Configuration > Connected Systems Extensions > Microsoft 365. After you confirm the consent has been granted, re-run the Analytics collection runbook. For additional information on the admin consent procedure, refer to the following article: Register application and grant consent to access managed tenant.
Symptom #2
The consent status in the Microsoft 365 extension reads Consent not granted after you have performed the required steps.
Resolution #2
Verify that you are using the same credentials used for the Microsoft 365 extension connection account.
Symptom #3
When you run the Analytics collection | Microsoft Office 365 rule, the rule report contains the following error:
Target system reported an error. Message: Insufficient privileges to complete the operation.Cause #3
The admin consent has been revoked by deleting the app registration.
Resolution #3
In the Microsoft 365 extension, click Check Settings to verify the current settings in the extension. Review the consent status and grant admin consent afterwards, if needed.
Related Articles
How to register the application and grant consent for the Cayosoft Administrator Service to access the managed tenant
Comments
0 comments
Please sign in to leave a comment.