3591930 - Insufficient privileges in reading entities from Microsoft Entra ID

Symptom

An error occurs during user provisioning from Microsoft Entra ID to the target system when Delegated permissions are used instead of Application permissions.

"HTTP operation failed invoking with statusCode: 403 and body {"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation."

Environment

Identity Provisioning Service (IPS)

Product

Identity Provisioning 1.0 ; SAP Cloud Identity Services all versions

Keywords

CIS, IAS, IPS, API, profile, user.read.all, group.read.all, permission, Azure AD, Microsoft Entra ID, Delegated Permissions, Application Permissions, Permissions, User Provisioning, IPS, Authorization Request Denied, 403, Authorization_RequestDenied, Insufficient privileges , KBA , BC-IAM-IPS , Identity Provisioning Service (IPS) , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.