How to manually remove cloud credentials and tenant apps from the ER database? (4382351)

The following error messages may appear when attempting to reconfigure the Azure tenant from the Configuration Manager console:

'App Consent Error'

'An error occurred while attempting to grant consent to this application'.

To clear the credential and tenant information from the Enterprise Reporter database tables and delete the app from Azure, perform the following steps:

1) Remove cloud credentials and tenant apps from the ER database by running the following queries:

DELETE FROM [tblCredentialRefreshTokens];
DELETE FROM [tblCredentials] WHERE AccountName like '%@%';
DELETE FROM [tblDirectoryDiscoveryType];
DELETE FROM [tblDirectoryConfig];

2) Delete the App Registration and Service Principal from Azure:

• In the Azure portal, search for an App Registration with the Title "Quest Enterprise Reporter Microsoft Entra Discovery v3", open it but don't delete it yet
• In the App Registration, look for the field labeled "Managed application in local directory", it should contain a link to the associated Service Principal
• Click the link to open the Service Principal, select Manage > Properties, then press delete at the top and follow the prompts
• Navigate back to the App Registration from step 2, then press delete at the top and follow the prompts.

3) Reconfigure tenant apps:

• Add the tenant and configure the tenant apps with a global administrator account.
• Once all desired tenant applications/certificates are configured, add a credential to the Credential Manager.
• Finally, create a discovery.