Error ensuring domain-wide principals

[JeroenMBooij]

Target SharePoint environment

SharePoint Online

What SharePoint development model, framework, SDK or API is this about?

💥 SharePoint Framework

Developer environment

Windows

What browser(s) / client(s) have you tested

• [ ] 💥 Internet Explorer
• [X] 💥 Microsoft Edge
• [ ] 💥 Google Chrome
• [ ] 💥 FireFox
• [ ] 💥 Safari
• [ ] mobile (iOS/iPadOS)
• [ ] mobile (Android)
• [ ] not applicable
• [ ] other (enter in the "Additional environment details" area below)

Additional environment details

• browser version: 130.0.2849.46
• SPFx version: 1.15.0
• Node.js version: 16

Describe the bug / error

Steps to reproduce

1. Create a Developer tenant in Sharepoint 365

2. Clone repository from https://github.com/pnp/addin-transformation-guidance/tree/main/samples/Understanding-AAD-OAuth-for-SPFx/Consuming-MSGraph-from-SPFx

3. Start Consuming-MSGraph-from-SPFx in https://{your_tenant}.sharepoint.com/_layouts/15/workbench.aspx

4. Get an error message saying: To view the information on this page, ask a Global or SharePoint Administrator in your organization to go to the API management page in the new SharePoint admin center.

5. Go to the API management page and get the error saying: Error ensuring domain-wide principals

6. I am also missing the SharePoint Online Client Extensibility Web Application Principal Helper in my Entra Id App registration, but I do have the SharePoint Online Client Extensibility Web Application Principal App registration.

Expected behavior

Able to manage access to Azure AD-secured APIs from SharePoint Framework components