Read only access for PNP app registration

[fusrohdan]

Hey,

So I have created an app registration which I can connect to successfully. Command used to connect is:
Connect-PnPOnline TENANT-admin.sharepoint.com -ClientId CLIENTID -Tenant TENANT.onmicrosoft.com -CertificatePath C:\it\PowershellPnP.pfx -CertificatePassword $password

This connects fine, however when I run the following command I get a 401 unauthorised error
Get-PnPTenantSite
Get-PnPTenantSite: The remote server returned an error: (401) Unauthorized.

Any other pnp command I use returns the same.
I have granted the app registration the following permissions

What I am currently trying to achieve is to grab a list of all sites, storage used, and get the content of the description of the site.

How can I achieve this using pnp?

Thanks!

[enricobeyer]

Hello fusrohdan,

first try the command Register-PnPEntraIDAppForInteractiveLogin to Login with -Interactive.
Then connect with
Connect-PnPOnline -ClientId $ClientID -Url tenant-admin.sharepoint.com/ -Interactive
First you may try it without -Tenant TENANT.onmicrosoft.com

Best regards,
Enrico

[Barbarur]

PnPTenantSite uses SPO API.
You are connecting using app credentials. But the SPO API is delegated.

Either you connect using delegated credentials or you grant application permissions to SPO API.

Keep in mind that application SPO API can only be used with a certification. Secret ID wouldn't allow you to connect.