Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Several AADRoleSettings not found despite being present #5602

Open
jadamones opened this issue Dec 30, 2024 · 0 comments
Open

Several AADRoleSettings not found despite being present #5602

jadamones opened this issue Dec 30, 2024 · 0 comments

Comments

@jadamones
Copy link

Description of the issue

The following role settings fail a Test-TargetResource stating that the role settings do not exist, however, they do exist in the tenant configuration.

AADRoleSetting-AI Administrator
AADRoleSetting-Attrribute Provisioning Administrator
AADRoleSetting-Attribute Provisioning Reader

Microsoft 365 DSC Version

v.1.24.1218.1

Which workloads are affected

Azure Active Directory (Entra ID)

The DSC configuration

AADRoleSetting "AADRoleSetting-AI Administrator"
    {
        ActivateApprover                                       = @();
        ActivationMaxDuration                                  = "";
        ActivationReqJustification                             = $False;
        ActivationReqMFA                                       = $False;
        ActivationReqTicket                                    = $False;
        ActiveAlertNotificationDefaultRecipient                = $False;
        ActiveAlertNotificationOnlyCritical                    = $False;
        ActiveApproveNotificationDefaultRecipient              = $False;
        ActiveApproveNotificationOnlyCritical                  = $False;
        ActiveAssigneeNotificationDefaultRecipient             = $False;
        ActiveAssigneeNotificationOnlyCritical                 = $False;
        ApplicationId                                          = $ApplicationId;
        ApprovaltoActivate                                     = $False;
        AssignmentReqJustification                             = $False;
        AssignmentReqMFA                                       = $False;
        AuthenticationContextId                                = "";
        AuthenticationContextName                              = "";
        AuthenticationContextRequired                          = $False;
        CertificateThumbprint                                  = $Thumbprint;
        DisplayName                                            = "AI Administrator";
        ElegibilityAssignmentReqJustification                  = $False;
        ElegibilityAssignmentReqMFA                            = $False;
        EligibleAlertNotificationDefaultRecipient              = $False;
        EligibleAlertNotificationOnlyCritical                  = $False;
        EligibleApproveNotificationDefaultRecipient            = $False;
        EligibleApproveNotificationOnlyCritical                = $False;
        EligibleAssigneeNotificationDefaultRecipient           = $False;
        EligibleAssigneeNotificationOnlyCritical               = $False;
        EligibleAssignmentAlertNotificationDefaultRecipient    = $False;
        EligibleAssignmentAlertNotificationOnlyCritical        = $False;
        EligibleAssignmentAssigneeNotificationDefaultRecipient = $False;
        EligibleAssignmentAssigneeNotificationOnlyCritical     = $False;
        Ensure                                                 = "Present";
        ExpireActiveAssignment                                 = "";
        ExpireEligibleAssignment                               = "";
        Id                                                     = ".........";
        PermanentActiveAssignmentisExpirationRequired          = $False;
        PermanentEligibleAssignmentisExpirationRequired        = $False;
        TenantId                                               = $TenantId;
    }

Verbose logs showing the problem

This event indicates that a non-terminating error was thrown when DSCEngine was executing Test-TargetResource on MSFT_AADRoleSetting DSC resource. FullyQualifiedErrorId is RoleSettingNotFound,Microsoft.Graph.Beta.PowerShell.Cmdlets.GetMgBetaPolicyRoleManagementPolicyRule_List. Error Message is [RoleSettingNotFound] : The role setting is not found..

MIResult: 1
Error Message: [RoleSettingNotFound] : The role setting is not found.
Message ID: RoleSettingNotFound,Microsoft.Graph.Beta.PowerShell.Cmdlets.GetMgBetaPolicyRoleManagementPolicyRule_List
Error Category: 7
Error Code: 7
Error Type: MI

MIResult: 1
Error Message: The PowerShell DSC resource '[AADRoleSetting]AADRoleSetting-AI Administrator::[AzureAD]AzureAD_Configuration' with SourceInfo 'C:\agent\_work\46\s\M365Config\0.0.1\DSCResources\AzureAD\AzureAD.schema.psm1::6341::5::AADRoleSetting' threw one or more non-terminating errors while running the Test-TargetResource functionality. These errors are logged to the ETW channel called Microsoft-Windows-DSC/Operational. Refer to this channel for more details.
Message ID: NonTerminatingErrorFromProvider
Error Category: 7
Error Code: 1
Error Type: MI

Environment Information + PowerShell Version

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant