Merge pull request #3408 from NikCharlebois/Fixes-#3179

Fixes #3179

CHANGELOG.md

@@ -11,6 +11,9 @@
   * Added support for the PlannerAllowCalendarSharing property for Planner.
   * Added support for the Microsoft 365 installation options.
   * Added support for the Viva Insights and Briefing email settings.
+* PPTenantIsolationSettings & PPTenantSettings
+  * Handles the case where required permissions are not provided when using SPN authentication.
+    FIXES [#3179](https://github.com/microsoft/Microsoft365DSC/issues/3179)
 * SCProtectionAlert
   * Prevents extracting system rules.
     FIXES [#3224](https://github.com/microsoft/Microsoft365DSC/issues/3224)

Modules/Microsoft365DSC/DSCResources/MSFT_PPTenantIsolationSettings/MSFT_PPTenantIsolationSettings.psm1

@@ -85,6 +85,10 @@ function Get-TargetResource
     try
     {
         $tenantIsolationPolicy = Get-PowerAppTenantIsolationPolicy -TenantId $tenantid
+        if ($tenantIsolationPolicy.StatusCode -eq 403)
+        {
+            throw "Invalid permission for the application. If you are using a custom app registration to authenticate, make sure it is defined as a Power Platform admin management application. For additional information refer to https://learn.microsoft.com/en-us/power-platform/admin/powershell-create-service-principal#registering-an-admin-management-application"
+        }
 
         [Array]$allowedTenants = $tenantIsolationPolicy.properties.allowedTenants | ForEach-Object {
             $directions = $_.direction

Modules/Microsoft365DSC/DSCResources/MSFT_PPTenantSettings/MSFT_PPTenantSettings.psm1

@@ -427,6 +427,11 @@ function Export-TargetResource
     try
     {
         $settings = Get-TenantSettings -ErrorAction Stop
+
+        if ($settings.StatusCode -eq 403)
+        {
+            throw "Invalid permission for the application. If you are using a custom app registration to authenticate, make sure it is defined as a Power Platform admin management application. For additional information refer to https://learn.microsoft.com/en-us/power-platform/admin/powershell-create-service-principal#registering-an-admin-management-application"
+        }
         $dscContent = ''
 
         $Params = @{