Unable to execute PnP script, getting error for cmd line Get-PnPUser -WithRightsAssigned | ? Title -eq "xxx@yyy.com"

[sundar399]

Hello team,

We are trying to execute a PnP script to get specific users (generic, bot accounts etc.,) permission present in all sharepoint sites in the tenant and remove those users permission also. When we run the script to get the user permission for the sites we are getting the below error,
"Get-PnPUser : The remote server returned an error: (403) Forbidden." (shared screenshot for full error)

We are sharing the script, where we try to get the user permission here,

Connect-PnPOnline -Url "tenant-url"
Connect-SpoService -Url "tenant-url"
$siteCollections = Get-PnPTenantSite

foreach($site in $siteCollections){
     Connect-PnPOnline -Url $site.Url -UseWebLogin
    
     Set-SPOUser -Site $site.Url -LoginName AdminLoginName -IsSiteCollectionAdmin $true

     write $site.Url Get-PnPUser -WithRightsAssigned | ? Title -eq "xxx@yyy.com"

    Set-SPOUser -Site $site.Url -LoginName AdminLoginName -IsSiteCollectionAdmin $false
    
    Disconnect-PnPOnline
}

FYI, our final result was to remove the specific users permission in all the sites in the SharePoint tenant.