Skip to content

[BUG] API Permissions for App Registration not correct #23

Open
@gunzebe

Description

@gunzebe

Describe the bug
It is not possible to delete a device from Entra ID with the documented API permissions when using an App Registration.

Documented permissions:
Device.Read.All
DeviceManagementApps.Read.All
DeviceManagementConfiguration.Read.All
DeviceManagementManagedDevices.ReadWrite.All
DeviceManagementServiceConfig.ReadWrite.All
Group.Read.All
User.Read.All

If you try to delete a device from Entra ID, an error message is displayed stating that access has been denied.

To Reproduce
Follow the docs, connect via app registration and try to delete an Entra ID Device.

Expected behavior
To be able to delete Entra ID Objects the app registration needs "Device.ReadWrite.All".
Please update the documentation and the prerequisite check accordingly.

Screenshots
Image

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions