Problem description
M365 backups are failing with Authentication error. (#100000003)
Cause
The account using which M365 app is configured in inSync does not have all permissions required.
Traceback
+snip+
[2022-11-21 23:55:50,824] [ERROR] Error <class 'common.errors.mst_error.MSTeamError'>:Authentication error. (#100000003). Traceback -Traceback (most recent call last):
File "/opt/Druva/active/src/lib/mst_backup_client.py", line 360, in check_token_status
self.agent.authenticate()
File "/opt/Druva/active/src/lib/mst_agent.py", line 155, in authenticate
raise fault
File "/opt/Druva/active/src/lib/mst_agent.py", line 151, in authenticate
self.get_team(self.teamid)
File "/opt/Druva/active/src/lib/mst_agent.py", line 217, in get_team
return self.client.get_retry(url=request_url)
File "/opt/Druva/active/src/common/utils/oauth_utils.py", line 470, in get_retry
raise error
common.errors.mst_error.MSTeamError: Internal Error!! Response Code: 403 Text:{"error":{"code":"Forbidden","message":"Missing role permissions on the request. API requires one of 'Team.ReadBasic.All, TeamSettings.Read.All, TeamSettings.ReadWrite.All, Group.Read.All, Directory.Read.All, Group.ReadWrite.All, Directory.ReadWrite.All, TeamSettings.Read.Group, TeamSettings.Edit.Group, TeamSettings.ReadWrite.Group'. Roles on the request ''. Resource specific consent grants on the request ''.","innerError":{"date":"2022-11-21T23:55:50","request-id":"71429041-736d-4253-b6f9-b6fd320c3337","client-request-id":"71429041-736d-4253-b6f9-b6fd320c3337"}}} (#100000004)
+snip+
Resolution
Reconfigure the M365 app in inSync using the global administrator’s account.
To reconfigure inSync with Microsoft 365:
On the inSync Management Console menu bar, click the
icon to access the global navigation panel.
Click SaaS Apps > Microsoft 365.
On the Overview page, click Re-Configure.
On the Re-Configure for Backup page, click
> Re-Configure besides the app type that you want to reconfigure.
Verification
Backup will complete successfully after reconfiguration of the M365 app in inSync.