New-MgEntitlementManagementAccessPackageAssignmentPolicy returns HTTP Code 404 response ("No HTTP resource was found that matches the request URI")

[manuel-falcao-magalhaes]

Describe the bug

Executing "New-MgEntitlementManagementAccessPackageAssignmentPolicy -AccessPackageId [Object id here]" returns the following error:

"New-MgEntitlementManagementAccessPackageAssignmentPolicy_CreateExpanded: No HTTP resource was found that matches the request URI 'https://igaelm-asev3-ecapi-neu.igaelm-asev3-environment-neu.p.azurewebsites.net/api/v1/accessPackages('[Redacted]')/assignmentPolicies'.

Status: 404 (NotFound) ErrorCode: Date: 2023-12-28T10:26:10

Headers: Transfer-Encoding : chunked Location : https://igaelm-asev3-ecapi-neu.igaelm-asev3-environment-neu.p.azurewebsites.net/api/v1/accessPackages('[Redacted]')/assignmentPolicies Vary : Accept-Encoding Strict-Transport-Security : max-age=31536000 request-id : b8a1fcdc-dbae-4949-b01d-a36a2fa88b89 client-request-id : 48dbad16-3656-47bc-a26f-c7139ef7760c x-ms-ags-diagnostic : {"ServerInfo":{"DataCenter":"France Central","Slice":"E","Ring":"5","ScaleUnit":"003","RoleInstance":"PA1PEPF000A53BA"}} Date : Thu, 28 Dec 2023 10:26:09 GMT"

To Reproduce

1. After authenticating with Connect-MgGraph, execute "New-MgEntitlementManagementAccessPackageAssignmentPolicy" and pass a value into the "-AccessPackageId" parameter.

2. The error will appear after 1.

Expected behavior

In the example above, I was expecting to return a BadRequest, since no body was passed. However, it seems that the endpoint targeted doesn't exist in the first place, so the observed behavior would occur with or without a body.

Debug Output DEBUG: ============================ HTTP REQUEST ============================

HTTP Method: POST

Absolute Uri: https://graph.microsoft.com/v1.0/identityGovernance/entitlementManagement/accessPackages/[Redacted]/assignmentPolicies

Headers: FeatureFlag : 00000043 Cache-Control : no-store, no-cache User-Agent : Mozilla/5.0,(Windows NT 10.0; Microsoft Windows 10.0.22631; en-US),PowerShell/7.4.0 Accept-Encoding : gzip SdkVersion : graph-powershell/2.11.1 client-request-id : c3dede82-240d-422a-8e2b-b4bb132a9371

Body: {}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code: NotFound

Headers: Transfer-Encoding : chunked Location : https://igaelm-asev3-ecapi-neu.igaelm-asev3-environment-neu.p.azurewebsites.net/api/v1/accessPackages('[Redacted]')/assignmentPolicies Vary : Accept-Encoding Strict-Transport-Security : max-age=31536000 request-id : f63464f5-fd52-4532-9d50-a54bf7f18482 client-request-id : c3dede82-240d-422a-8e2b-b4bb132a9371 x-ms-ags-diagnostic : {"ServerInfo":{"DataCenter":"France Central","Slice":"E","Ring":"5","ScaleUnit":"002","RoleInstance":"PA3PEPF00000836"}} Date : Thu, 28 Dec 2023 10:38:03 GMT

Body: { "error": { "code": "", "message": "No HTTP resource was found that matches the request URI 'https://igaelm-asev3-ecapi-neu.igaelm-asev3-environment-neu.p.azurewebsites.net/api/v1/accessPackages('[Redacted]')/assignmentPolicies'.", "innerError": { "date": "2023-12-28T10:38:04", "request-id": "f63464f5-fd52-4532-9d50-a54bf7f18482", "client-request-id": "c3dede82-240d-422a-8e2b-b4bb132a9371" } } }

New-MgEntitlementManagementAccessPackageAssignmentPolicy_CreateExpanded: No HTTP resource was found that matches the request URI 'https://igaelm-asev3-ecapi-neu.igaelm-asev3-environment-neu.p.azurewebsites.net/api/v1/accessPackages('[Redacted]')/assignmentPolicies'.

Status: 404 (NotFound) ErrorCode: Date: 2023-12-28T10:38:04

Headers: Transfer-Encoding : chunked Location : https://igaelm-asev3-ecapi-neu.igaelm-asev3-environment-neu.p.azurewebsites.net/api/v1/accessPackages('[Redacted]')/assignmentPolicies Vary : Accept-Encoding Strict-Transport-Security : max-age=31536000 request-id : f63464f5-fd52-4532-9d50-a54bf7f18482 client-request-id : c3dede82-240d-422a-8e2b-b4bb132a9371 x-ms-ags-diagnostic : {"ServerInfo":{"DataCenter":"France Central","Slice":"E","Ring":"5","ScaleUnit":"002","RoleInstance":"PA3PEPF00000836"}} Date : Thu, 28 Dec 2023 10:38:03 GMT

DEBUG: [CmdletEndProcessing]: - New-MgEntitlementManagementAccessPackageAssignmentPolicy end processing.

Module Version Name : Microsoft.Graph.Authentication Path : C:\Program Files\WindowsPowerShell\Modules\Microsoft.Graph.Authentication\2.11.1\Microsoft.Graph.Authentication.psm1 Description : Microsoft Graph PowerShell Authentication Module. ModuleType : Script Version : 2.11.1 NestedModules : {Microsoft.Graph.Authentication, Microsoft.Graph.Authentication.Core} ExportedFunctions : {Find-MgGraphCommand, Find-MgGraphPermission} ExportedCmdlets : {Add-MgEnvironment, Connect-MgGraph, Disconnect-MgGraph, Get-MgContext...} ExportedVariables : ExportedAliases : {Connect-Graph, Disconnect-Graph, Invoke-GraphRequest, Invoke-MgRestMethod}

Name : Microsoft.Graph.Identity.Governance Path : C:\Program Files\WindowsPowerShell\Modules\Microsoft.Graph.Identity.Governance\2.11.1\Microsoft.Graph.Identity.Governance.psm1 Description : Microsoft Graph PowerShell Cmdlets ModuleType : Script Version : 2.11.1 NestedModules : {Microsoft.Graph.Identity.Governance.private, Microsoft.Graph.Identity.Governance.custom} ExportedFunctions : {Add-MgIdentityGovernanceAccessReviewDefinitionInstanceDecision, Get-MgAgreement, Get-MgAgreementAcceptance, Get-MgAgreementAcceptanceCount...} ExportedCmdlets : ExportedVariables : ExportedAliases :

Environment Data Name Value

---

PSVersion 7.4.0 PSEdition Core GitCommitId 7.4.0 OS Microsoft Windows 10.0.22631 Platform Win32NT PSCompatibleVersions {1.0, 2.0, 3.0, 4.0…} PSRemotingProtocolVersion 2.3 SerializationVersion 1.1.0.1 WSManStackVersion 3.0

[timayabi2020]

Hi @manuel-falcao-magalhaes I wasn't able to reproduce the issue. I successfully ran the command by first ensuring that I had an entitlement management access package (run Get-MgEntitlementManagementAccessPackage), picked the Id from the response and ran the command as per the PowerShell code snippet example in the API reference here.

[manuel-falcao-magalhaes]

@timayabi2020 Thank you for your reply.

In your scenario "New-MgEntitlementManagementAssignmentPolicy" was used, which does work.

This issue was for "New-MgEntitlementManagementAccessPackageAssignmentPolicy", which is a documented cmdlet (https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.identity.governance/new-mgentitlementmanagementaccesspackageassignmentpolicy?view=graph-powershell-1.0).

Perhaps "New-MgEntitlementManagementAccessPackageAssignmentPolicy" could be removed, since "New-MgEntitlementManagementAssignmentPolicy" exists and it does what "New-MgEntitlementManagementAccessPackageAssignmentPolicy" would be expected to do from its name.