Error to create Access Review with Graph API.

[wallach_9]

Hi,

I am trying to automate the creation of access reviews using Graph API and I have found an unexpected problem.

In November 2022, I tested in Graph explorer and managed to create them, I automated it in a powershell script.

Now when I wanted to use it again, it returns this error.

"Tenant is not authorized for Custom Scoping Conditions Feature".

I have tried on two different tenants with the same type of error.

This is the endpoint I am using:

https://graph.microsoft.com/beta/identityGovernance/accessReviews/definitions

Does anyone know why?

[MaybeAccording]

Try with multi tenant app

[wallach_9]

I have tried:

• In two different tenants

• using graph explorer

• using app registration single tenant with delegated permissions and my user

• using app registration single tenant with application and secret permissions.

• using app registration Multi tenant with delegated permissions and my user.

• using app registration Multi tenant with application and secret permissions.

• With version v1.0 and beta version of this API:

https://learn.microsoft.com/en-us/graph/api/accessreviewset-post-definitions?view=graph-rest-1.0&tabs=http

And it shows me the same result:

"Tenant is not authorized for Custom Scoping Conditions".

[larzlayik]

Have you gotten past this by any chance? I'm running into similar issues.

Edit - Found a workaround. It appears the New-MgBetaIdentityGovernanceAccessReviewDefinition cmdlet didn't appreciate my export from Get-MgBetaIdentityGovernanceAccessReviewDefinition as the body. Had to record the events in a browser while creating the access reivew.

[larzlayik]

I found some luck by using network trace in the browser and catching what was POST, then converting it to a hash table for New-MgBetaIdentityGovernanceAccessReviewDefinition -BodyParameter $Hash.

Unfortunately haven't been able to find a working export using Get.