Problem description

M365 backups are failing with Authentication error. (#100000003)

Cause

The account using which M365 app is configured in inSync does not have all permissions required. 

Traceback

+snip+

[2022-11-21 23:55:50,824] [ERROR] Error <class 'common.errors.mst_error.MSTeamError'>:Authentication error. (#100000003). Traceback -Traceback (most recent call last):

File "/opt/Druva/active/src/lib/mst_backup_client.py", line 360, in check_token_status

self.agent.authenticate()

File "/opt/Druva/active/src/lib/mst_agent.py", line 155, in authenticate

raise fault

File "/opt/Druva/active/src/lib/mst_agent.py", line 151, in authenticate

self.get_team(self.teamid)

File "/opt/Druva/active/src/lib/mst_agent.py", line 217, in get_team

return self.client.get_retry(url=request_url)

File "/opt/Druva/active/src/common/utils/oauth_utils.py", line 470, in get_retry

raise error

common.errors.mst_error.MSTeamError: Internal Error!! Response Code: 403 Text:{"error":{"code":"Forbidden","message":"Missing role permissions on the request. API requires one of 'Team.ReadBasic.All, TeamSettings.Read.All, TeamSettings.ReadWrite.All, Group.Read.All, Directory.Read.All, Group.ReadWrite.All, Directory.ReadWrite.All, TeamSettings.Read.Group, TeamSettings.Edit.Group, TeamSettings.ReadWrite.Group'. Roles on the request ''. Resource specific consent grants on the request ''.","innerError":{"date":"2022-11-21T23:55:50","request-id":"71429041-736d-4253-b6f9-b6fd320c3337","client-request-id":"71429041-736d-4253-b6f9-b6fd320c3337"}}} (#100000004)

+snip+

 

Resolution

Reconfigure the M365 app in inSync using the global administrator’s account.

To reconfigure inSync with Microsoft 365:

On the inSync Management Console menu bar, click the icon to access the global navigation panel.

1. Click SaaS Apps > Microsoft 365. 

2. On the Overview page, click Re-Configure.

3. On the Re-Configure for Backup page,  click   > Re-Configure besides the app type that you want to reconfigure.