Replies: 7 comments 1 reply
-
I found that I must use the beta profile. After Connect-MGraph, execute the line, Select-MgProfile Beta |
Beta Was this translation helpful? Give feedback.
-
I get this error even after connecting with Connect-MgGraph -Scopes "Directory.ReadWrite.All" |
Beta Was this translation helpful? Give feedback.
-
The error message specifies that you require Reports.ReadAll.
Try adding or using the Reports.ReadAll scope when you connect.
Client Confidential - OCG Internal
From: Padure Sergio ***@***.***>
Sent: Friday, February 10, 2023 8:08 AM
To: msgraph/powershell ***@***.***>
Cc: Michael Liben ***@***.***>; Comment ***@***.***>
Subject: [EXTERNAL]Re: [msgraph/powershell] Get authentication methods registered by users (Discussion #41)
[EXTERNAL] Use caution opening attachments, clicking links, or responding.
Get-MgReportCredentialUserRegistrationDetail : Calling principal does not have required MSGraph permissions Reports.Read.All
At line:1 char:1
+ Get-MgReportCredentialUserRegistrationDetail -All
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: ({ Top = 100, Sk...ndProperty = }:<>f__AnonymousType2`8) [Get-MgReportCre...tionDetail_List], RestException`1
+ FullyQualifiedErrorId : Authentication_MSGraphPermissionMissing,Microsoft.Graph.PowerShell.Cmdlets.GetMgReportCredentialUserRegistrationDetail_List
I get this error even after connecting with Connect-MgGraph -Scopes "Directory.ReadWrite.All"
-
Reply to this email directly, view it on GitHub<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgitpro.ttaallkk.top%2Forgs%2Fmsgraph%2Fdiscussions%2F41%23discussioncomment-4934921&data=05%7C01%7Cmichael.liben%40oxfordcomputergroup.com%7C3dc5a52a4c3c4b2ae13b08db0b67cfac%7C9505d3230e794ceab1d35475ecc368b6%7C0%7C0%7C638116312763189874%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=juoCdoO%2F4XKonaZ9FRkwJ2bt23g5fNVSdes%2F9nxG%2FHw%3D&reserved=0>, or unsubscribe<https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgitpro.ttaallkk.top%2Fnotifications%2Funsubscribe-auth%2FAO3KH6XBEBXXZC3BVGLGYLLWWY4SJANCNFSM5W7AFKGQ&data=05%7C01%7Cmichael.liben%40oxfordcomputergroup.com%7C3dc5a52a4c3c4b2ae13b08db0b67cfac%7C9505d3230e794ceab1d35475ecc368b6%7C0%7C0%7C638116312763189874%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=WfkOHNkRjRm7MMBA3AvIk0MNOqzTSmxmRu%2F03I5hhzA%3D&reserved=0>.
You are receiving this because you commented.Message ID: ***@***.******@***.***>>
DISCLAIMER: The information contained in this message may be confidential and/or subject to legal privilege and is for the use of the intended recipient(s) only. Any unauthorized use, dissemination or copying of the information in this message is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete this message.
|
Beta Was this translation helpful? Give feedback.
-
I saw a thread on twitter and thought I'll post my script here
|
Beta Was this translation helpful? Give feedback.
-
I had to install/import the Microsoft.Graph.Beta.Reports module as well for the cmdlet 'Get-MgBetaReportCredentialUserRegistrationDetail' to be recognized, still couldn't get it to work with 'Get-MgReportCredentialUserRegistrationDetail' |
Beta Was this translation helpful? Give feedback.
-
after setting scope permissions and switching mgprofile to Beta got the following message: |
Beta Was this translation helpful? Give feedback.
-
Hi I accept that not all methods registered are authentication methods, but I would have expected Windows Hello for Business, and maybe some others, to be in the Auth Methods list returned using Get-MgReportCredentialUserRegistrationDetail I am specifically looking for a way to return all accounts which have WHfB registered. |
Beta Was this translation helpful? Give feedback.
-
Beta Was this translation helpful? Give feedback.
All reactions