Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

AADGroup - AssignedLicense returnes False at Test-Resource #4623

Open
milkaohnil opened this issue May 1, 2024 · 0 comments
Open

AADGroup - AssignedLicense returnes False at Test-Resource #4623

milkaohnil opened this issue May 1, 2024 · 0 comments
Labels
Bug Something isn't working Entra ID V1.24.424.1 Version 1.24.424.1

Comments

@milkaohnil
Copy link

Description of the issue

If I check the compliancy of the Environment, right after successful Deployment with the same Configuration, I get a false at a Security Group with has a License assigned. If I unassign the license, there's no problem. So there must be a problem with the check of the Licenseassignment. But if I check the Log, it's also saying "AssignedLicenses for Azure AD Group are the same".
And also, if I export the configuration and Ctrl+C and Ctrl+V to my Config and redeploy and recheck, the issue is still persistant.

Microsoft 365 DSC Version

1.24.417.1 and 1.24.424.1

Which workloads are affected

Azure Active Directory (Entra ID)

The DSC configuration

AADGroup "AADGroup-CSGA-PRD-LIC-BusinessPremium"
    {
        AssignedLicenses     = @(MSFT_AADGroupLicense { 
            DisabledPlans = @()
            SkuId         = 'SPE_E5'
        }
        );
        Description          = "Licensing group for BusinessPremium"
        DisplayName          = "CSGA-PRD-LIC-BusinessPremium"
        Ensure               = "Present"
        GroupTypes           = @()
        Id                   = "*"
        MailEnabled          = $False
        MailNickname         = "CSGA-PRD-LIC-BusinessPremium"
        MemberOf             = @()
        Members              = @("cdla-ach@$OrganizationName")
        Owners               = @("admin@$OrganizationName")
        SecurityEnabled      = $True
        Visibility           = "Private"
        ApplicationId        = $ApplicationId
        TenantId             = $TenantId
        CertificateThumbprint= $Thumbprint
    }

Verbose logs showing the problem

2024-05-01T05:49:16.9528981Z VERBOSE: [fv-az633-754]: LCM:  [ Start  Resource ]  
2024-05-01T05:49:16.9536270Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration]
2024-05-01T05:49:16.9543519Z VERBOSE: [fv-az633-754]: LCM:  [ Start  Test     ]  
2024-05-01T05:49:16.9550629Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration]
2024-05-01T05:49:16.9557431Z VERBOSE: [fv-az633-754]:                            
2024-05-01T05:49:16.9564808Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration] Testing configuration of AzureAD Groups
2024-05-01T05:49:16.9571833Z VERBOSE: [fv-az633-754]:                            
2024-05-01T05:49:16.9578565Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration] Getting configuration of AzureAD Group
2024-05-01T05:49:17.6069490Z VERBOSE: [fv-az633-754]:                            
2024-05-01T05:49:17.6086825Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration] GroupID was specified
2024-05-01T05:49:17.6969978Z VERBOSE: [fv-az633-754]:                            
2024-05-01T05:49:17.6976943Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration] Couldn't get group by ID, trying by name
2024-05-01T05:49:17.8240689Z VERBOSE: [fv-az633-754]:                            
2024-05-01T05:49:17.8247248Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration] Found existing AzureAD Group
2024-05-01T05:49:18.1600759Z VERBOSE: [fv-az633-754]:                            
2024-05-01T05:49:18.1610128Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration] GET 
2024-05-01T05:49:18.1618139Z https://graph.microsoft.com/v1.0/groups/93e4a76f-a5bf-45b8-adda-9f788272f12a/assignedLicenses with 0-byte payload
2024-05-01T05:49:18.2534406Z VERBOSE: [fv-az633-754]:                            
2024-05-01T05:49:18.2545153Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration] received 205-byte response of content type 
2024-05-01T05:49:18.2548347Z application/json
2024-05-01T05:49:18.4567733Z VERBOSE: [fv-az633-754]:                            
2024-05-01T05:49:18.4573905Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration] Getting all Service Plans
2024-05-01T05:49:18.4844211Z VERBOSE: [fv-az633-754]:                            
2024-05-01T05:49:18.4855022Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration] Current Values: ApplicationId=***
2024-05-01T05:49:18.4855533Z 
2024-05-01T05:49:18.4865627Z ApplicationSecret=$null
2024-05-01T05:49:18.4866024Z 
2024-05-01T05:49:18.4875916Z AssignedLicenses={DisabledPlans=()
2024-05-01T05:49:18.4876316Z 
2024-05-01T05:49:18.4886124Z SkuId=SPE_E5}
2024-05-01T05:49:18.4886563Z 
2024-05-01T05:49:18.4896340Z AssignedToRole=$null
2024-05-01T05:49:18.4897339Z 
2024-05-01T05:49:18.4907572Z CertificateThumbprint=***
2024-05-01T05:49:19.3195003Z 
2024-05-01T05:49:19.3201100Z Credential=$null
2024-05-01T05:49:19.3201316Z 
2024-05-01T05:49:19.3201798Z Description=Licensing group for BusinessPremium
2024-05-01T05:49:19.3202024Z 
2024-05-01T05:49:19.3202294Z DisplayName=CSGA-PRD-LIC-BusinessPremium
2024-05-01T05:49:19.3202809Z 
2024-05-01T05:49:19.3203050Z Ensure=Present
2024-05-01T05:49:19.3203276Z 
2024-05-01T05:49:19.3203505Z GroupTypes=()
2024-05-01T05:49:19.3203635Z 
2024-05-01T05:49:19.3203945Z Id=93e4a76f-a5bf-45b8-adda-9f788272f12a
2024-05-01T05:49:19.3204112Z 
2024-05-01T05:49:19.3204398Z IsAssignableToRole=$null
2024-05-01T05:49:19.3204546Z 
2024-05-01T05:49:19.3204834Z MailEnabled=False
2024-05-01T05:49:19.3204969Z 
2024-05-01T05:49:19.3205280Z MailNickname=CSGA-PRD-LIC-BusinessPremium
2024-05-01T05:49:19.3205439Z 
2024-05-01T05:49:19.3205729Z Managedidentity=False
2024-05-01T05:49:19.3205867Z 
2024-05-01T05:49:19.3206138Z MemberOf=()
2024-05-01T05:49:19.3206266Z 
2024-05-01T05:49:19.3206582Z Members=([email protected])
2024-05-01T05:49:19.3206745Z 
2024-05-01T05:49:19.3207040Z MembershipRule=$null
2024-05-01T05:49:19.3207179Z 
2024-05-01T05:49:19.3207479Z MembershipRuleProcessingState=$null
2024-05-01T05:49:19.3207637Z 
2024-05-01T05:49:19.3208478Z Owners=([email protected])
2024-05-01T05:49:19.3208639Z 
2024-05-01T05:49:19.3208925Z SecurityEnabled=True
2024-05-01T05:49:19.3209065Z 
2024-05-01T05:49:19.3209340Z TenantId=***
2024-05-01T05:49:19.3209468Z 
2024-05-01T05:49:19.3209754Z Visibility=Private
2024-05-01T05:49:19.3210032Z VERBOSE: [fv-az633-754]:                            
2024-05-01T05:49:19.3210477Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration] Target Values: ApplicationId=***
2024-05-01T05:49:19.3210714Z 
2024-05-01T05:49:19.3211034Z AssignedLicenses=({DisabledPlans=; SkuId=SPE_E5})
2024-05-01T05:49:19.3211202Z 
2024-05-01T05:49:19.3211513Z CertificateThumbprint=***
2024-05-01T05:49:19.3211658Z 
2024-05-01T05:49:19.3212027Z Description=Licensing group for BusinessPremium
2024-05-01T05:49:19.3212194Z 
2024-05-01T05:49:19.3212502Z DisplayName=CSGA-PRD-LIC-BusinessPremium
2024-05-01T05:49:19.3212663Z 
2024-05-01T05:49:19.3212941Z Ensure=Present
2024-05-01T05:49:19.3213075Z 
2024-05-01T05:49:19.3213340Z Id=*
2024-05-01T05:49:19.3213460Z 
2024-05-01T05:49:19.3213736Z MailEnabled=False
2024-05-01T05:49:19.3213872Z 
2024-05-01T05:49:19.3214178Z MailNickname=CSGA-PRD-LIC-BusinessPremium
2024-05-01T05:49:19.3214496Z 
2024-05-01T05:49:19.3214876Z Owners=([email protected])
2024-05-01T05:49:19.3215040Z 
2024-05-01T05:49:19.3215322Z SecurityEnabled=True
2024-05-01T05:49:19.3215462Z 
2024-05-01T05:49:19.3215687Z TenantId=***
2024-05-01T05:49:19.3215866Z 
2024-05-01T05:49:19.3216089Z Verbose=True
2024-05-01T05:49:19.3216277Z 
2024-05-01T05:49:19.3216509Z Visibility=Private
2024-05-01T05:49:19.3216831Z VERBOSE: [fv-az633-754]:                            
2024-05-01T05:49:19.3217278Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration] AssignedLicenses for Azure AD Group are the 
2024-05-01T05:49:19.3217627Z same
2024-05-01T05:49:19.3217934Z VERBOSE: [fv-az633-754]:                            
2024-05-01T05:49:19.3218376Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration] Test-TargetResource returned False
2024-05-01T05:49:19.3218832Z VERBOSE: [fv-az633-754]: LCM:  [ End    Test     ]  
2024-05-01T05:49:19.3219213Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration] False in 1.6270 seconds.
2024-05-01T05:49:19.3219645Z VERBOSE: [fv-az633-754]: LCM:  [ End    Resource ]  
2024-05-01T05:49:19.3220050Z [[AADGroup]CSGA-PRD-LIC-BusinessPremium::[EntraID]EntraID_Configuration]
2024-05-01T05:49:19.3220496Z VERBOSE: [fv-az633-754]: LCM:  [ Start  Resource ]  [[AADRoleDefinition]Default User::[EntraID]EntraID_Configuration]
2024-05-01T05:49:19.3221023Z VERBOSE: [fv-az633-754]: LCM:  [ Start  Test     ]  [[AADRoleDefinition]Default User::[EntraID]EntraID_Configuration]
2024-05-01T05:49:19.3221547Z VERBOSE: [fv-az633-754]:                            [[AADRoleDefinition]Default User::[EntraID]EntraID_Configuration] 
2024-05-01T05:49:19.3221978Z Testing configuration of AzureAD role definition
2024-05-01T05:49:19.3222464Z VERBOSE: [fv-az633-754]:                            [[AADRoleDefinition]Default User::[EntraID]EntraID_Configuration] 
2024-05-01T05:49:19.3222900Z Getting configuration of Azure AD role definition
2024-05-01T05:49:20.2623904Z VERBOSE: [fv-az633-754]:                            [[AADRoleDefinition]Default User::[EntraID]EntraID_Configuration]

Environment Information + PowerShell Version

Windows Server 2019
English
Powershell 5.238.11s
@andikrueger andikrueger added Bug Something isn't working Entra ID V1.24.424.1 Version 1.24.424.1 labels May 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Bug Something isn't working Entra ID V1.24.424.1 Version 1.24.424.1
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@andikrueger @milkaohnil