Latest SIM and 365 Permission errors

kstaude asked a question.

June 25, 2019 at 7:00 AM

Hi everyone, wanted to ask here first while opening a ticket as well to see if there was a quick documented way for setting up permissions for 365. Each customer seems to want to do the permissions slightly different and the current SIM/365 Guide hasn't been updated or granular enough to always get the desired outcome.

I've seen a few posts on here with the 365 connection, but seems the most common is around permissions. Here is the error I'm seeing for Skype and Exchange Online user activities.

ERROR SnowSoftware.ExternalDataProvider.Providers.Office365.O365Import [()] [()] - An error occurred while fetching Skype user activities.

System.Web.HttpException (0x80004005): {

"error": {

"code": "S2SUnauthorized",

"message": "Invalid scope claims/roles.",

"innerError": {

"request-id": "38105b96-64e8-4d5f-ae26-648227dec4ba",

"date": "2019-06-25T20:01:02"

Looks at my own 365 instance and searching for this error I know it has to do with permissions somewhere under the Graph API. I've done this a few different times over the last few years, but know MS has also changed some of the locations of the permissions. We do have the Exchange "View Org" set, we have the "Reports.Read.All" set and granted by admin, and Skype admin just in case.

Any other screenshots or tips folks could add in?

Portal User
7 years ago
Hi Ken, Which SIM version you are using 5.14 or 5.15? Same issue we are also facing where some VMware ESXs and O365 not aggregated. Wait for SIM 5.16 because 5.14 or 5.15 has some issues and same would address in new version. I am also waiting for same which is scheduled to release on 19-Jun-2019 (As per Release note found into KB) but still not able to see in public FTP. The Problem Record "PRB0042326 : SIM 5.14: VMWare VSphere connector do not collect all virtual machines of a host " affects Snow Integration Manager (SIM) versions 5.14 and 5.15. To address this problem, some users already at those versions have downgraded to SIM version 5.13. Thanks, Kishan Pant
Expand Post
- Colin Campbell
  7 years ago
  This problem is fixed in 5.16 [Edit: 5.16.2] - release notes are published but the software is not yet available for download more than three weeks later. [ETA: due within the next week, according to a similar question & response from Snow: Why vSphere connector not inventoried all VM on hosts .] Release notes for Snow Integration Manager 5.16 SIM 5.15 fixed errors retrieving Office 365 Exchange and Skype activities due to .NET/SSL ever-tightening security.
  Expand Post
- ChristophTUVSUD
  7 years ago
  Thanks for letting us know. Since I installed SIM 5.15 in the mid of June, the SIM Windows Service now starts again after a system reboot, but as the opposite half of our VMware hosts are no longer updated and the Log file is full of errors. I did not notice until today, since I was on holiday. Christoph Feiden
  Expand Post
kstaude
7 years ago
Just a small note that if you are in the Azure Portal and still having permission issues, you may need to check the "new GUI" vs. the legacy app registration view. While we did originally "grant permission" when enabling Reports.Read.All, seems to not quite do the trick until we went to the new GUI and did the grant admin consent there. Once we changed this, we were able to aggregate and get data flowing in without issue.
Expand Post
- dirk.stolle
  7 years ago
  Hi, I had this error because of a wrong permission type. It needs to be "Application permissions" not "Delegated permissions" otherwise you will get the same error. If you add permission, then "Delegated permissions" is selected by default! So first change it to "Application permissions" regards Dirk
  Expand Post
- Colin Campbell
  7 years ago
  Hi Ken, Yes the new GUI makes it a lot easier, or at least, a lot more obvious. Configuring the permissions is a two-step process: first you have to create them, then you have to apply (grant) them. In our case, running a highly-secured environment we ran in to problems with everything on the Office 365 side being okay - we could read it fine from a default, non-tightened server - but getting failures in a production, secured environment. This was eventually tracked to the .NET security settings; from our support case they fixed it in SIM 5.15 release. Cheers Colin
  Expand Post
  - Portal User
    7 years ago
    Now released date scheduled for 5.16 is 09-Jul-2019 .
    Expand Post
    ChristophTUVSUD
    7 years ago
    I installed SIM 5.16.2093.0 on 13-Jul-2019. However my issue has not been solved. About half of our VMware ESXi Hosts are still not being updated, their entry in SMACC still shows 14-Jun-2019 as the date of the last scan (the day when I switched from SIM 5.13 to SIM 5.15). I see two error messages "ERROR SnowSoftware.ExternalDataProvider.Providers.VSphere.VSphereServer [()] [5.16.2093.0] - Failed to retrieve server. Skipping to next. Message -> Value cannot be .". Unfortunately my other tasks at work do not allow me for a proper license management, so I will not file a service request. There is a discussion added to the "Official Release announcement for SIM 5.16" but it does not seem to help me with my issue.
    Expand Post
    kstaude
    7 years ago
    I'm still seeing VMware errors in 5.16 errors as well which is unresolved with a support ticket since the release. I'm going to roll back to 5.13 again to get this (VMware) working.
    Expand Post
    Colin Campbell
    7 years ago
    Hi , as you may be aware, there is an updated version of SIM 5.16: 5.16.2. From the other thread, it has mixed success.
    Expand Post

10 of 11

Related Product Forums

→ Flexera One

→ Snow Atlas

→ FlexNet Manager

→ Snow License Manager

→ App Broker

Need help finding an answer?

Ask a Question →