Azure Active Directory/ Entra ID discovery completes with the following error message, even though Global Reader and Report Reader are assigned to the Azure credentials:
ErrorDescription: One or more errors occurred.
ErrorMessageID: Unable to retrieve password sync status
ErrorMessageStack: at System.Threading.Tasks.Task`1.GetResultCore(Boolean waitCompletionNotification)
at Quest.Reporter.Jobs.Discovery.AAD.Collector.DiscoverAAD.CollectTenantPasswordSyncStatus(DataAzureTenant dataAzureTenant, String authenticationToken)
Azure Active Directory/ Entra ID discovery now requires either Global Administrator role or for minimum permissions: Global Reader, Report Reader and Hybrid Identity Administrator.
WORKAROUND:
Add the Hybrid Identity Administrator role to the Azure credentials.
STATUS
Defect ID - 543216 has been created to consider including a fix in a future release of the product.
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center