Get-MgDirectoryRole with GA => insufficient privilege

[UnknownB81]

Hello,

Powershell : 5.1
OS : Windows 10
Microsoft.Graph.Authentication 1.7.0 installed
Microsoft.Graph.Identity.DirectoryManagement 1.7.0 installed

I used Connect-MgGraph and I ckecked my context with Get-MgContext. I'm connected with my Global Admin.
I'd like to list all directory role or GA. I used Get-MgDirectoryRole or Get-MgDirectoryRole -DirectoryRoleId 'a2d10e79-df32-47fc-86ef-64d199860810'.
Result :
**_Get-MgDirectoryRole : Insufficient privileges to complete the operation.
At line:1 char:1

• Get-MgDirectoryRole -DirectoryRoleId 'a2d10e79-df32-47fc-86ef-64d1998 ...

•   + CategoryInfo          : InvalidOperation: ({ DirectoryRole...ndProperty =  }:<>f__AnonymousType41`3) [Get-MgDire
   ctoryRole_Get2], RestException`1
    + FullyQualifiedErrorId : Authorization_RequestDenied,Microsoft.Graph.PowerShell.Cmdlets.GetMgDirectoryRole_Get2_**
  
  

Thanks
Mathias

[peombwa]

You need to consent to one of the following permissions to get a directory role - Connect-MgGraph -Scopes "RoleManagement.Read.Directory, Directory.Read.All". With Microsoft Graph API, you must consent to the permissions for the resources and APIs you are accessing before using them, see https://docs.microsoft.com/en-us/graph/auth/auth-concepts?view=graph-rest-1.0.

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 4 days. It will be closed if no further activity occurs within 3 days of this comment.