In some cases, MS Graph authentication in Easy365Manager will fail with the following error message:
The error message contains the following key elements:
AADSTS50105: Your administrator has configured the application Microsoft Graph Command Line Tools to block users.
The signed in user 'adm.msk@azure.skrubbeltrang.com' is blocked because they are not a direct member of a group with access, nor had access directly assigned by an administrator.
To solve this, you must configure the Microsoft Graph PowerShell API (aka ‘Microsoft Graph Command Line Tools’) to either turn off “Assignment Required” or assign the application explicitly to the user.
To verify that Assignment Required is enabled, go to Enterprise Applications in the Azure Portal:
Locate the Microsoft Graph Command Line Tools application, open it, and select Properties:
You can either set Assignment Required to ‘No,’ or you can explicitly add the user (or group) that requires access to the Microsoft Graph PowerShell API:
You must wait a few seconds for the changes to replicate throughout the Azure infrastructure before logging in to Easy365Manager.
