Update-MgPrivilegedAccessResourceRoleSetting - error URI api.azrbac.mspim.azure.com

[vincentmiens]

Hi,
I have an issue with the cmdlet Update-MgPrivilegedAccessResourceRoleSetting.
I try Update-MgPrivilegedAccessResourceRoleSetting -PrivilegedAccessId azureResources -GovernanceResourceId $RoleSetting.ResourceId -GovernanceRoleSettingId $RoleSetting.Id
I am sure the IDs are correct.
But the response is :

Absolute Uri:
https://graph.microsoft.com/beta/privilegedAccess/azureResources/resources/********-****-****-****-************/roleSettings/********-****-****-****-************

Followed by :

Body:
{
  "error": {
    "code": "UnknownError",
    "message": "{\"message\":\"No HTTP resource was found that matches the request URI 'https://api.azrbac.mspim.azure.com/api/v2/governanceResources('********-****-****-****-************')/roleSettings('********-****-****-****-************')?'.\"}",
    "innerError": {
      "date": "2022-12-16T21:00:48",
      "request-id": "5fb90750-367b-4976-8913-659c5b5863ba",
      "client-request-id": "5fb90750-367b-4976-8913-659c5b5863ba"
    }
  }
}

What can I do to resolve this issue ?
Thanks !
Vincent.

[peombwa]

Thanks for following up on this.

Please open a ticket/question at https://developer.microsoft.com/en-us/graph/support to get assistance from API owner on how to use the command/API. Update-MgPrivilegedAccessResourceRoleSetting is described as a valid API path/ command in the service metadata by the API owner. You can see this by using Find-MgGraphCommand -Command Update-MgPrivilegedAccessResourceRoleSetting.

In your ticket/question, please include the requestId and date of the affected calls. See Microsoft Graph PowerShell module troubleshooting guide for more details.

We may not be the best place to answer some queries that are tied to the functionality of the API.

[peombwa]

According to the API reference, the right command to update governanceRoleSetting is Update-MgPrivilegedAccessRoleSetting:

➜ Find-MgGraphCommand -Uri "/privilegedAccess/{azureResources}/roleSettings/{id}" -Method PATCH

   APIVersion: beta

Command                              Module              Method URI                                                                             OutputType Permissions Variants
-------                              ------              ------ ---                                                                             ---------- ----------- --------
Update-MgPrivilegedAccessRoleSetting Identity.Governance PATCH  /privilegedAccess/{privilegedAccess-id}/roleSettings/{governanceRoleSetting-id}            {}          {Update, UpdateEx…

From the error message you've shared above, It does appear that /privilegedAccess/{privilegedAccess-id}/resources/{governanceResource-id}/roleSettings/{governanceRoleSetting-id} (Update-MgPrivilegedAccessResourceRoleSetting) is not valid and the service metadata is not valid.

We will surface this to the API owner for the metadata to be fixed.

[vincentmiens]

Thanks a lot Peter !!
Today, I was able to modify my role settings with the cmdlet Update-MgPrivilegedAccessRoleSetting, and not the other one.
Great :)
Vincent.