An additional step required when configuring Microsoft Entra ID endpoint to manage Azure with REST Connector

Products

• CA Identity Suite

Issue/Introduction

When you follow the below Broadcom documentation to configure the Microsoft Entra ID endpoint (in this case, connecting to Exchange Online), you are likely to encounter permission issues.

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/identity-management-and-governance-connectors/1-0/connectors/microsoft-connectors/microsoft-azure/manage-azure-with-rest-connector.html

Environment

CA Identity Suite 14.5

Cause

Missing assignment of Microsoft Entra roles to the registered application.

Resolution

To solve the problem, follow step 5 (Assign Microsoft Entra roles to the application) from the Microsoft documentation available at https://learn.microsoft.com/en-us/powershell/exchange/app-only-auth-powershell-v2?view=exchange-ps