HTTP/1.1 403 Forbidden

[Bono-Boy]

Hello,

I am Global Admin of a client of us and try to use this script. After consensing the permissions i still receive HTTP/1.1 403 Forbidden. This is the complete error i receive.

`Invoke-MgGraphRequest : GET https://graph.microsoft.com/beta/groups?$filter=displayName%20eq%20'AzureHomeDeployments' HTTP/1.1 403 Forbidden Transfer-Encoding: chunked Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 request-id: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx client-request-id: xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx x-ms-ags-diagnostic: {"ServerInfo":{"DataCenter":"West Europe","Slice":"E","Ring":"5","ScaleUnit":"003","RoleInstance":"AM1PEPF0002839F"}} x-ms-resource-unit: 1 Cache-Control: no-cache Date: Thu, 17 Aug 2023 08:34:08 GMT Content-Encoding: gzip Content-Type: application/json {"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2023-08-17T08:34:09","request-id":"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx","client-request-id":"xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxxxxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"}}} At C:\Program Files\WindowsPowerShell\Scripts\Get-AllAadGroupAssignments.ps1:55 char:17

• ... return (Invoke-MgGraphRequest -Uri $uri -Method Get -OutputType P ...

•             ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : InvalidOperation: (Method: GET, Re...0bd52496aad1 }:HttpRequestMessage) [Invoke-MgGraphRequest], HttpResponseException
  • FullyQualifiedErrorId : InvokeGraphHttpResponseException,Microsoft.Graph.PowerShell.Authentication.Cmdlets.InvokeMgGraphRequest`

  What permissions are missing here?