MSFT_AADServicePrincipal Get-TargetResource has hard coded Commercial Graph endpoints breaking Government

[mpoulson]

Description of the issue

AADServicePrincipal.Get-TargetResource call to Invoke-MgGraphRequest use a hard coded graph.microsoft.com endpoint in a number of locations which results in failure with EntraID Government tenants.

Correct call should use $Global:MSCloudLoginConnectionProfile.MicrosoftGraph.ResourceUrl for the graph hostname.

complexDelegatedPermissionClassifications delegatedPermissionClassifications

FYI: All calls to graph.microsoft.com need to be replaced with a cloud specific endpoint and Devs need to stop hard coding graph.microsoft.com

Microsoft 365 DSC Version

1.24.1016.1

Which workloads are affected

Azure Active Directory (Entra ID)

The DSC configuration

No response

Verbose logs showing the problem

No response

Environment Information + PowerShell Version

No response