IT39530: USERS INVENTORY PROCESS FOR MICROSOFT 365 RETURNS 0 USERS

APAR status

• Closed as program error.

Error description

• Users inventory process for Microsoft 365 returns 0 users.
  
  In the diagnostic logs, the following error can be seen:
  
  {date}
  {time} [WRN] [taskId=] [threadId=10] Can't get information about
  UserPurpose
  Status Code: Forbidden
  Microsoft.Graph.ServiceException: Code: ErrorAccessDenied
  Message: Access is denied. Check credentials and try again.
  ClientRequestId: 6c9cfde7-e4ef-41e4-a533-1cf55844395a
  

Local fix

• Add an additional permission *MailboxSettings.Read" to the
  application created in the Azure Active Directory:
  
  1. Go to the Microsoft 365 welcome page and sign in to your
  account by using your Microsoft 365 administrative user ID and
  password.
  2.To open the Azure Active Directory admin center, in the left
  pane, click the ellipsis to expand the Show all menu, and then
  click Admin centers > Azure Active Directory.
  3. To open your tenant dashboard, in the left pane of the Azure
  Active Directory admin center, click Azure Active Directory.
  4. In the tenant dashboard menu, click App registrations and
  then click application name used by the Spectrum Protect Plus
  agent
  5. In the dashboard menu, click "App permissions" and then click
  "Add a permission"
  6. Select "Microsoft Graph", select the Application Permissions
  type, select the following permission "MailboxSettings.Read" and
  click "Add permissions" button
  7. To save the selected permissions, click "Grant admin consent
  for your organization name", where your organization name
  specifies the name of your organization.
  
  Note that the permission refreshing can take up to a few minutes
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * IBM Spectrum ProtectPlus level 10.1.9                        *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See ERROR DESCRIPTION                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Apply fixing level when available. This problem is currently *
  * projected to be fixed IBM Spectrum Protect Plus level 10.1.9 *
  * ifix3 and 10.1.10. Note that this is subject to change at    *
  * the discretion of IBM.                                       *
  ****************************************************************
  

Problem conclusion

• This problem has been fixed, the inventory process completed
  successfully and the number of returned users is correct
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• Apps     O365
  

Fix information

• Fixed component name

  SP PLUS

• Fixed component ID

  5737SPLUS

Applicable component levels