MSIdentityTools icon indicating copy to clipboard operation
MSIdentityTools copied to clipboard

Export-MsIdAppConsentGrantReport PropertyNotFoundException

Open mmascolino opened this issue 1 year ago • 5 comments

Building upon Issue #46 , I have updated both the MSIdentityTools module and the Microsoft.Graph module to the latest versions. I continue to get this error on a very large EntraID tenant.

To give you an idea the error is occurring during "Processing delegate permissions" 35824 out of 43464. At this point I don't know if this is a transient error, bad data in the EntraID, my PIMable global reader running out or something else.

mmascolino avatar Jul 12 '24 17:07 mmascolino

Does it stop processing or do you see that error for a few apps?

merill avatar Jul 18 '24 05:07 merill

After first instance of this error it continues onward in the Process delegate permissions step for thousands of entries. It encounters more instances of this error and eventually freezes. Its been stuck at 35898 of 43547 for an hour or so.

mmascolino avatar Jul 18 '24 18:07 mmascolino

@mmascolino I had a PR which I think solves your issue. Maybe try again.

#58 https://github.com/AzureAD/MSIdentityTools/pull/58

robbieveivers avatar Sep 25 '24 03:09 robbieveivers

@robbieveivers - thanks. Tentatively I think this may have addressed this. I say tentatively because the command runs longer than my PIMable elevation to Global Reader so eventually it stalled out (actually there appears to be a different infinite loop bug in this condition).

So I am working with my security team to get my PIMable assignments changed so I can get the full output.

mmascolino avatar Sep 30 '24 12:09 mmascolino

@mmascolino ohh true, yeah thats a big tenant. Let us know how it goes with extending the PIMable assignment time. Our tenant is only small compared to yours but it seems to grow all the time. image , I think we need to look at a Clean up App report, searches for unused apps, and then options to remove/archive.

robbieveivers avatar Oct 08 '24 02:10 robbieveivers