Get-AzADUser: Insufficient privileges to complete the operation.

[geidlin]

Hi Community,

Im logging myself in PSVersion 7.1.3 using a SPN that has the following permissions in AAD:

Command to log:
Connect-AzAccount -Credential $AzureCredentials -Tenant "##################" -ServicePrincipal

Permissions Granted via AAD:

Error Getting Users:

Any idea or what im doing wrong here?
TIA

[VeryEarly]

User.Read.All might be admin-restricted permissions

[dingmeng-xue]

@geidlin Please try Application Permission Directory.Read.All. My observation is AAD graph has load balancer and it may take couple seconds to take effect.