获取New-AzureADUserAppRoleAssignment的权限不足错误 [英] Getting insufficient privileges error for New-AzureADUserAppRoleAssignment

问题描述

我正在使用内置的< g class ="gr_ gr_11 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id ＝"11". id ="11"> powershell</g> https://portal.azure.com上的控制台并获取 低于错误.我的登录帐户是外部Azure Active Directory"，以及具有全球管理员"身份的会员；目录角色.

I am using inbuilt <g class="gr_ gr_11 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" data-gr-id="11" id="11">powershell</g> console on https://portal.azure.com and getting below error. My login account is "External Azure Active Directory" and Member with "Global administrator" directory role.

New-AzureADUserAppRoleAssignment:执行NewUserAppRoleAssignment时发生错误
代码:Authorization_RequestDenied
消息:特权不足，无法完成操作.
HttpStatusCode:禁止
HttpStatus描述:禁止
HttpResponseStatus:已完成
在第1行:char:1
+ New-AzureADUserAppRoleAssignment -ObjectId e5eaa3e9-611e-473d-a874-4c ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~~~~
+ CategoryInfo         :未指定:(:) [New-AzureADUserAppRoleAssignment]，ApiException
+ FullyQualifiedErrorId:Microsoft.Open.AzureAD16.Client.ApiException，Microsoft.Open.AzureAD16.PowerShell.NewUserAppRoleAssignment

New-AzureADUserAppRoleAssignment : Error occurred while executing NewUserAppRoleAssignment
Code: Authorization_RequestDenied
Message: Insufficient privileges to complete the operation.
HttpStatusCode: Forbidden
HttpStatusDescription: Forbidden
HttpResponseStatus: Completed
At line:1 char:1
+ New-AzureADUserAppRoleAssignment -ObjectId e5eaa3e9-611e-473d-a874-4c ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo          : NotSpecified: (:) [New-AzureADUserAppRoleAssignment], ApiException
+ FullyQualifiedErrorId : Microsoft.Open.AzureAD16.Client.ApiException,Microsoft.Open.AzureAD16.PowerShell.NewUserAppRoleAssignment

推荐答案

这可能是权限问题.您可能要检查应用程序权限"和委派权限"如此处所讨论- https://github.com/Azure-Samples/active-directory-dotnet-graphapi-console/issues/48

This could be a permission issue. You may want to check "Application Permissions" and "Delegated Permissions" as discussed here - https://github.com/Azure-Samples/active-directory-dotnet-graphapi-console/issues/48

--------------------------------------------------- -------------------------------------------------- ----------------------------------
如果此答案有帮助，请单击"标记为答案"，然后单击投票.要提供有关您的论坛体验的其他反馈，请单击 这里 

-----------------------------------------------------------------------------------------------------------------------------------
If this answer was helpful, click "Mark as Answer" and Up-Vote. To provide additional feedback on your forum experience, click here 

这篇关于获取New-AzureADUserAppRoleAssignment的权限不足错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！