Skipping eligible roles as required Graph permission 'RoleEligibilitySchedule.ReadWrite.Directory' was not present.

[simon-barratt-seq]

I have just started seeing this warning popup. Any ideas? Not sure why it would require ReadWrite permission.

[soulemike]

Hi Simon, there is a need for ReadWrite to retrieve members of eligible role assignments. There is more detail here too.

#195 (comment)

[simon-barratt-seq]

Thanks. The app registration does have that particular permission, but it still throws the warning.

[soulemike]

If you are using Connect-Maester are you including the -Privileged parameter?

[simon-barratt-seq]

I am now! Thanks that fixed it.

[soulemike]

Nice, glad that solved it. I know we just recently merged in some new docs around that too, so it wasn't the most obvious "feature".