Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Endpoint '/beta/admin/entra/uxSetting' HTTP GET 403 Error #3237

Closed
PauPlanaguma opened this issue Mar 24, 2025 · 2 comments
Closed

Endpoint '/beta/admin/entra/uxSetting' HTTP GET 403 Error #3237

PauPlanaguma opened this issue Mar 24, 2025 · 2 comments
Labels
area:permissions Focused on functional module permissions Service issue

Comments

@PauPlanaguma
Copy link

Describe the bug

I am trying to do:
Invoke-MgGraphRequest -URI '/beta/admin/entra/uxSetting' -Method get
I recive this response:
Invoke-MgGraphRequest: GET https://graph.microsoft.com/beta/admin/entra/uxSetting
HTTP/2.0 401 Unauthorized
Cache-Control: no-cache
Vary: Accept-Encoding
Strict-Transport-Security: max-age=31536000
request-id: 5d1445b8-a94f-4803-8778-cf7130bb00b9
client-request-id: a548f46e-ac73-410a-9928-242c33d09698
x-ms-ags-diagnostic: {"ServerInfo":{"DataCenter":"France Central","Slice":"E","Ring":"5","ScaleUnit":"002","RoleInstance":"PA3PEPF0000082A"}}
Date: Mon, 24 Mar 2025 14:29:56 GMT
Content-Type: application/json
{"error":{"code":"UnknownError","message":"{"ClassName":"System.Security.Authentication.AuthenticationException","Message":"S2S17000: SAL was unable to validate the protocol. Validation failure: 'UnsupportedAuthenticationScheme; ValidationCompleted; MSAuth10AuthenticatorTypeUnknown; UnsupportedAuthenticationScheme'","Data":null,"InnerException":null,"HelpURL":null,"StackTraceString":null,"RemoteStackTraceString":null,"RemoteStackIndex":0,"ExceptionMethod":null,"HResult":-2146233087,"Source":null,"WatsonBuckets":null}","innerError":{"date":"2025-03-24T14:29:56","request-id":"5d1445b8-a94f-4803-8778-cf7130bb00b9","client-request-id":"a548f46e-ac73-410a-9928-242c33d09698"}}}

I do the request with a Global Administrator of Tenant like recommends API md file:
In delegated scenarios with work or school accounts, the signed-in user must be assigned the Global Administrator Microsoft Entra role.

Expected behavior

HTTP 200 with restrictNonAdminAccess property info

How to reproduce

Connect-MgGraph

(Login interactive with Global Administrator user)

Invoke-MgGraphRequest -URI '/beta/admin/entra/uxSetting' -Method Get

SDK Version

2.26.1

Latest version known to work for scenario above?

No response

Known Workarounds

No response

Debug output

Click to expand log ```
</details>


### Configuration

_No response_

### Other information

_No response_
@PauPlanaguma PauPlanaguma added status:waiting-for-triage An issue that is yet to be reviewed or assigned type:bug A broken experience labels Mar 24, 2025
@timayabi2020
Copy link
Contributor

Hi @PauPlanaguma this seems to be a service issue, where the service expects you to have connected with specific scopes which unfortunately have not been documented here https://learn.microsoft.com/en-us/graph/api/uxsetting-get?view=graph-rest-beta&tabs=http.
For API related issues/questions we are not best placed to give an answer. Kindly raise an issue here https://developer.microsoft.com/en-us/graph/support so that the API owner can respond to it.

@timayabi2020 timayabi2020 added Service issue area:permissions Focused on functional module permissions and removed status:waiting-for-triage An issue that is yet to be reviewed or assigned type:bug A broken experience labels Mar 25, 2025
@PauPlanaguma
Copy link
Author

Thanks for your quick response!

Have a good day <3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area:permissions Focused on functional module permissions Service issue
Projects
None yet
Development

No branches or pull requests

2 participants