Most Assignment cmdlets don't work and throw "error": { "code": "No method match route template",

[stevejmonk]

Describe the bug

All these both v1 and Beta fail with the same error "error": { "code": "No method match route template", it seems they are blocked by the Graph API gateway, there is one that works that i have listed at the bottom

Microsoft support can reproduce it and have provided a very cumbersome workaround to use Invoke-restmethod https://graph.microsoft.com/beta/deviceAppManagement/mobileAppConfigurations/<App_Config_Id>/microsoft.graph.managedDeviceMobileAppConfiguration/assign

Not working New-MgBetaDeviceManagementDeviceCompliancePolicyAssignment New-MgBetaDeviceAppManagementiOSManagedAppProtectionAssignment New-MgBetaDeviceAppManagementAndroidManagedAppProtectionAssignment New-MgBetaDeviceAppManagementMobileAppConfigurationAssignment New-MgBetaDeviceAppManagementMobileAppAsIoVppAppAssignment New-MgBetaDeviceAppManagementMobileAppAsiOSLobAppAssignment New-MgBetaDeviceAppManagementMobileAppAsManagediOSLobAppAssignment Get-MgBetaDeviceAppManagementMobileAppAsIoVppAppAssignment Get-MgBetaDeviceAppManagementMobileAppAsiOSLobAppAssignment Get-MgBetaDeviceAppManagementMobileAppAsManagediOSLobAppAssignment New-MgBetaDeviceAppManagementiOSManagedAppProtectionAssignment New-MgBetaDeviceAppManagementAndroidManagedAppProtectionAssignment Get-MgBetaDeviceAppManagementiOSManagedAppProtectionAssignment Get-MgBetaDeviceAppManagementAndroidManagedAppProtectionAssignment Get-MgBetaDeviceAppManagementMobileAppConfigurationAssignment Get-MgBetaDeviceManagementDeviceCompliancePolicyAssignment

This one works ok New-MgBetaDeviceManagementDeviceConfigurationAssignment

Expected behavior

Groups should be assigned to policies or apps, without wiping out the existing assignments

How to reproduce

$TargetGroupObject = @{ '@odata.type' = '#microsoft.graph.groupAssignmentTarget' deviceAndAppManagementAssignmentFilterId = $Filters.Id deviceAndAppManagementAssignmentFilterType = $FilterTypeInput groupId = $group.Id }

    $Script:Devpolicies | ForEach-Object {
New-MgBetaDeviceManagementDeviceConfigurationAssignment -DeviceConfigurationId $_.Id -Target $TargetGroupObject
    }

Error No OData route exists that match template

SDK Version

2.23.0

Latest version known to work for scenario above?

No response

Known Workarounds

use Invoke-restmethod https://graph.microsoft.com/beta/deviceAppManagement/mobileAppConfigurations/<App_Config_Id>/microsoft.graph.managedDeviceMobileAppConfiguration/assign

Debug output

DEBUG: [CmdletBeginProcessing]: - New-MgBetaDeviceManagementDeviceCompliancePolicyAssignment begin processing with parameterSet 'CreateExpanded'. DEBUG: [Authentication]: - AuthType: 'Delegated', TokenCredentialType: 'InteractiveBrowser', ContextScope: 'CurrentUser', AppName: 'Microsoft Graph Command Line Tools'. DEBUG: [Authentication]: - Scopes: [Agreement.ReadWrite.All, Application.Read.All, Application.ReadWrite.All, AppRoleAssignment.ReadWrite.All, CloudPC.ReadWrite.All, DelegatedPermissionGrant.ReadWrite.All, Device.Read.All, DeviceManagementApps.Read.All, DeviceManagementApps.ReadWrite.All, DeviceManagementConfiguration.Read.All, DeviceManagementConfiguration.ReadWrite.All, DeviceManagementManagedDevices.Read.All, DeviceManagementManagedDevices.ReadWrite.All, DeviceManagementRBAC.ReadWrite.All, DeviceManagementServiceConfig.Read.All, DeviceManagementServiceConfig.ReadWrite.All, Directory.AccessAsUser.All, Directory.Read.All, Directory.ReadWrite.All, Domain.Read.All, Domain.ReadWrite.All, email, Group.Read.All, Group.ReadWrite.All, openid, Organization.ReadWrite.All, Policy.Read.All, Policy.ReadWrite.ConditionalAccess, PrivilegedEligibilitySchedule.ReadWrite.AzureADGroup, profile, RoleAssignmentSchedule.Read.Directory, RoleAssignmentSchedule.ReadWrite.Directory, RoleManagement.Read.All, RoleManagement.Read.Directory, User.Read, User.Read.All, User.ReadWrite.All, UserAuthenticationMethod.Read.All].

Confirm Are you sure you want to perform this action? Performing the operation "New-MgBetaDeviceManagementDeviceCompliancePolicyAssignment_CreateExpanded" on target "Call remote 'POST /deviceManagement/deviceCompliancePolicies/{deviceCompliancePolicy-id}/assignments' operation". [Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is "Y"): y DEBUG: ============================ HTTP REQUEST ============================

HTTP Method: POST

Absolute Uri: [https://graph.microsoft.com/beta/deviceManagement/deviceCompliancePolicies/PolicyIDguid/assignments]

Headers: FeatureFlag : 00000043 Cache-Control : no-store, no-cache User-Agent : Mozilla/5.0,(Windows NT 10.0; Microsoft Windows 10.0.19045; en-US),PowerShell/2024.2.2 Accept-Encoding : gzip SdkVersion : graph-powershell-beta/2.23.0 client-request-id : fd73aae8-1467-4183-bcc6-92d6ea284a32

Body: {}

DEBUG: ============================ HTTP RESPONSE ============================

Status Code: BadRequest

Headers: Vary : Accept-Encoding Strict-Transport-Security : max-age=31536000 request-id : e72bcf99-1b94-410c-8a38-fe72590b2171 client-request-id : fd73aae8-1467-4183-bcc6-92d6ea284a32 x-ms-ags-diagnostic : {"ServerInfo":{"DataCenter":"UK South","Slice":"E","Ring":"5","ScaleUnit":"004","RoleInstance":"LO1PEPF00003248"}} Date : Thu, 03 Oct 2024 10:28:18 GMT

Body: { "error": { "code": "No method match route template", "message": "No OData route exists that match template ~/singleton/navigation/key/navigation with http verb POST for request /DeviceConfiguration_2409/StatelessDeviceConfigurationFEService/deviceManagement/deviceCompliancePolicies('5517726c-e0e8-4afc-9087-0380ea6bbc94')/assignments.", "innerError": { "date": "2024-10-03T10:28:18", "request-id": "e72bcf99-1b94-410c-8a38-fe72590b2171", "client-request-id": "fd73aae8-1467-4183-bcc6-92d6ea284a32" } } }

New-MgBetaDeviceManagementDeviceCompliancePolicyAssignment_CreateExpanded: Line | 13 | … ch-Object { New-MgBetaDeviceManagementDeviceCompliancePolicyAssignmen … | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ | No OData route exists that match template ~/singleton/navigation/key/navigation with http verb POST for request /DeviceConfiguration_2409/StatelessDeviceConfigurationFEService/deviceManagement/deviceCompliancePolicies(‘policyIDguid’)/assignments.

Status: 400 (BadRequest) ErrorCode: No method match route template Date: 2024-10-03T10:28:18

Headers: Vary : Accept-Encoding Strict-Transport-Security : max-age=31536000 request-id : e72bcf99-1b94-410c-8a38-fe72590b2171 client-request-id : fd73aae8-1467-4183-bcc6-92d6ea284a32 x-ms-ags-diagnostic : {"ServerInfo":{"DataCenter":"UK South","Slice":"E","Ring":"5","ScaleUnit":"004","RoleInstance":"LO1PEPF00003248"}} Date : Thu, 03 Oct 2024 10:28:18 GMT

DEBUG: [CmdletEndProcessing]: - New-MgBetaDeviceManagementDeviceCompliancePolicyAssignment end processing.

Configuration

PSVersion 7.4.3 PSedition Core Gitcommit ID 7.4.3 OS Microsoft Windows 10.0.19045 Platform Win32Int PSCompatableVersions 1,2,3,4 PS remotingprotocolversion 2.3 Serializationversion 1.1.0.1 WSManStackversion 3.0

Other information

No response