Problem description

MS Team's backup fails showing error  “Authentication error. (#100000003) “  

Cause

This issue occurs if there are no proper permissions assigned to the administrator account which was used to configure the Druva inSync M365 app.

Traceback

+snip+

[2022-11-21 23:55:50,824] [ERROR] Error <class 'common.errors.mst_error.MSTeamError'>:Authentication error. (#100000003). Traceback -Traceback (most recent call last):

File "/opt/Druva/active/src/lib/mst_backup_client.py", line 360, in check_token_status

self.agent.authenticate()

File "/opt/Druva/active/src/lib/mst_agent.py", line 155, in authenticate

raise fault

File "/opt/Druva/active/src/lib/mst_agent.py", line 151, in authenticate

self.get_team(self.teamid)

File "/opt/Druva/active/src/lib/mst_agent.py", line 217, in get_team

return self.client.get_retry(url=request_url)

File "/opt/Druva/active/src/common/utils/oauth_utils.py", line 470, in get_retry

raise error

common.errors.mst_error.MSTeamError: Internal Error!! Response Code: 403 Text:{"error":{"code":"Forbidden","message":"Missing role permissions on the request. API requires one of 'Team.ReadBasic.All, TeamSettings.Read.All, TeamSettings.ReadWrite.All, Group.Read.All, Directory.Read.All, Group.ReadWrite.All, Directory.ReadWrite.All, TeamSettings.Read.Group, TeamSettings.Edit.Group, TeamSettings.ReadWrite.Group'. Roles on the request ''. Resource specific consent grants on the request ''.","innerError":{"date":"2022-11-21T23:55:50","request-id":"71429041-736d-4253-b6f9-b6fd320c3337","client-request-id":"71429041-736d-4253-b6f9-b6fd320c3337"}}} (#100000004)

+snip+

Resolution

API requires one of below mentioned permissions for backing up Teams data.

Assign below permissions to the administrator account which was used to configure Druva inSync M365 application.

• 'Team.ReadBasic.All

•  TeamSettings.Read.All

•  TeamSettings.ReadWrite.All

• Group.Read.All, Directory.Read.All

• Group.ReadWrite.All

•  Directory.ReadWrite.All

• TeamSettings.Read.Group

•  TeamSettings.Edit.Group

•  TeamSettings.ReadWrite.Group'

OR

• Reconfigure Druva inSync M365 app using Global admin account.

Reference: https://docs.druva.com/SaaS_Apps/Pro...ure_Office_365