You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I'm using Maester with Azure DevOps, as documented here.
The Service Principal has RoleEligibilitySchedule.ReadWrite.Directory but doesn't explicitly have RoleEligibilitySchedule.Read.Directory.
My understanding is that the ReadWrite permission is a superset of the Read permission.
What happens
The pipeline execution fails with this error:
Exception: /home/vsts/.local/share/powershell/Modules/Maester/1.0.0/internal/Test-MtContext.ps1:44
Line |
44 | throw $message
| ~~~~~~~~~~~~~~
| These Graph permissions are missing in the current connection =>
| (RoleEligibilitySchedule.Read.Directory). Add the missing 'Application'
| permissions in the Microsoft Entra portal and grant consent. You will
| also need to Disconnect-Graph to refresh the permissions. Click here to
| open the 'API Permissions' blade for this app (GitHub/Azure DevOps might
| prevent this link from working):
| https://entra.microsoft.com/#view/Microsoft_AAD_RegisteredApps/ApplicationMenuBlade/~/CallAnAPI/appId/***/isMSAApp~/false
What I think should happen
It shouldn't fail since RoleEligibilitySchedule.Read.Directory is contained in RoleEligibilitySchedule.ReadWrite.Directory.
The text was updated successfully, but these errors were encountered:
Context
I'm using Maester with Azure DevOps, as documented here.
The Service Principal has
RoleEligibilitySchedule.ReadWrite.Directory
but doesn't explicitly haveRoleEligibilitySchedule.Read.Directory
.My understanding is that the
ReadWrite
permission is a superset of theRead
permission.What happens
The pipeline execution fails with this error:
What I think should happen
It shouldn't fail since
RoleEligibilitySchedule.Read.Directory
is contained inRoleEligibilitySchedule.ReadWrite.Directory
.The text was updated successfully, but these errors were encountered: