Problem with Search-AzGraph and -UseTenantScope

[mcdonamw]

This is my first time trying to use Search-AzGraph but I'm having difficulty. This command fails unless I first issue Set-AzContext. Not sure why that is as I've already selected my context upon Connect-AzAccount. Once I set the context again, the query returns results.

I found this cmdlet has a -UseTenantScope parameter. Thinking this would be the solution as I do not want to have to change contexts, I tried it, but when I use this parameter, no results are returned at all. I'm not sure what's going on here. Can anyone help?

I used the debug parameter and this is what I got (redacted personal info).

C:\Scripts\...\Backup and Recovery> Search-AzGraph -Query $query -UseTenantScope -Debug
DEBUG: 5:52:48 PM - [ConfigManager] Got nothing from [DisplaySecretsWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 5:52:48 PM - SearchAzureRmGraph begin processing with ParameterSet 'TenantScopedQuery'.
DEBUG: 5:52:48 PM - using account id '<redacted>'...
DEBUG: 5:52:48 PM - [ConfigManager] Got nothing from [DisplayBreakingChangeWarning], Module = [], Cmdlet = []. Returning default value [True].
VERBOSE: Sent top=100 skip=0 skipToken=

Confirm
Continue with this operation?
[Y] Yes  [A] Yes to All  [H] Halt Command  [S] Suspend  [?] Help (default is "Y"): A
DEBUG: [Common.Authentication]: Authenticating using Account: '<redacted>', environment: 'AzureCloud', tenant: '<redacted>'
DEBUG: 5:53:02 PM - [ConfigManager] Got nothing from [DisableInstanceDiscovery], Module = [], Cmdlet = []. Returning default value [False].
DEBUG: 5:53:02 PM - [ConfigManager] Got [True] from [EnableLoginByWam], Module = [], Cmdlet = [].
DEBUG: 5:53:02 PM - [SilentAuthenticator] Calling SharedTokenCacheCredential.GetTokenAsync - TenantId:'<redacted>', Scopes:'https://management.core.windows.net//.default', AuthorityHost:'https://login.microsoftonline.com/', UserId:'<redacted>'
DEBUG: SharedTokenCacheCredential.GetToken invoked. Scopes: [ https://management.core.windows.net//.default ] ParentRequestId:
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 7308821a-3ff2-48ca-8a33-ba67c4d72be9] IsLegacyAdalCacheEnabled: yes
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 7308821a-3ff2-48ca-8a33-ba67c4d72be9] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 7308821a-3ff2-48ca-8a33-ba67c4d72be9] IsLegacyAdalCacheEnabled: yes
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 7308821a-3ff2-48ca-8a33-ba67c4d72be9] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 7308821a-3ff2-48ca-8a33-ba67c4d72be9] IsLegacyAdalCacheEnabled: yes
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [Runtime] WAM supported OS.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [RuntimeBroker] ListWindowsWorkAndSchoolAccounts option was not enabled.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 325357ed-5303-457b-8bea-d455f16c698b] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] Found 1 cache accounts and 0 broker accounts
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] Returning 1 accounts
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] MSAL MSAL.CoreCLR with assembly version '4.61.3.0'. CorrelationId(3395ee8d-bc42-446d-ab67-14b09d135a84)
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] === AcquireTokenSilent Parameters ===
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] LoginHint provided: False
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] Account provided: True
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] ForceRefresh: False
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84]
=== Request Data ===
Authority Provided? - True
Scopes - https://management.core.windows.net//.default
Extra Query Params Keys (space separated) -
ApiId - AcquireTokenSilent
IsConfidentialClient - False
SendX5C - False
LoginHint ? False
IsBrokerConfigured - True
HomeAccountId - False
CorrelationId - 3395ee8d-bc42-446d-ab67-14b09d135a84
UserAssertion set: False
LongRunningOboCacheKey set: False
Region configured:

DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] === Token Acquisition (SilentRequest) started:
         Scopes: https://management.core.windows.net//.default
        Authority Host: login.microsoftonline.com
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] Broker is configured and enabled, attempting to use broker instead.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [Runtime] WAM supported OS.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] Can invoke broker. Will attempt to acquire token with broker.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0012]      WARNING SetAuthorityUri:78       Initializing authority from URI 'https://login.microsoftonline.com/<redacted>/' without authority type, defaulting to MsSts
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    LogTelemetryData:422     Printing Telemetry for Correlation ID: 3395ee8d-bc42-446d-ab67-14b09d135a84
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    LogTelemetryData:430     Key: start_time, Value: 2024-11-11T22:53:02.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    LogTelemetryData:430     Key: api_name, Value: ReadAccountById
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    LogTelemetryData:430     Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    LogTelemetryData:430     Key: authority_type, Value: Unknown
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    LogTelemetryData:430     Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    LogTelemetryData:430     Key: correlation_id, Value: 3395ee8d-bc42-446d-ab67-14b09d135a84
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    LogTelemetryData:430     Key: broker_app_used, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    LogTelemetryData:430     Key: stop_time, Value: 2024-11-11T22:53:02.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    LogTelemetryData:430     Key: msalruntime_version, Value: 0.16.2
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    LogTelemetryData:430     Key: is_successful, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    LogTelemetryData:430     Key: request_duration, Value: 0
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    SetCorrelationId:258     Set correlation ID: 3395ee8d-bc42-446d-ab67-14b09d135a84
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    EnqueueBackgroundRequest:1000    The original authority is 'https://login.microsoftonline.com/<redacted>'
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    ModifyAndValidateAuthParameters:219      Additional query parameter added successfully. Key: '(pii)' Value: '(pii)'
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      INFO    ModifyAndValidateAuthParameters:243      Authority Realm: <redacted>
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0785]      WARNING TryEnqueueMsaDeviceCredentialAcquisitionAndContinue:1052 MsaDeviceOperationProvider is not available. Not attempting to register the device.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    StorageTokenResponse:84  StorageTokenResponse account constructor invoked. This is only expected in Runtime flows
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:422     Printing Telemetry for Correlation ID: 3395ee8d-bc42-446d-ab67-14b09d135a84
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: start_time, Value: 2024-11-11T22:53:02.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: api_name, Value: AcquireTokenSilently
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: was_request_throttled, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: authority_type, Value: AAD
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: access_token_expiry_time, Value: 2024-11-11T23:46:31.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: read_token, Value: ID|AT
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: msal_version, Value: 1.1.0+local
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: client_id, Value: <redacted>
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: correlation_id, Value: 3395ee8d-bc42-446d-ab67-14b09d135a84
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: broker_app_used, Value: false
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: stop_time, Value: 2024-11-11T22:53:02.000Z
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: msalruntime_version, Value: 0.16.2
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: original_authority, Value: https://login.microsoftonline.com/<redacted>
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: request_eligible_for_broker, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: additional_query_parameters_count, Value: 1
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: storage_read, Value: DAC|DAT|DID
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: auth_flow, Value: AT
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: is_successful, Value: true
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: authorization_type, Value: WindowsIntegratedAuth
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:430     Key: request_duration, Value: 4
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:435     Printing Execution Flow:
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [MSAL:0003]      INFO    LogTelemetryData:443     {"t":"4s7uc","tid":785,"ts":0,"l":2},{"t":"4sufd","tid":785,"ts":0,"s":2,"l":2},{"t":"4swgg","tid":785,"ts":0,"s":773,"l":2},{"t":"4swgf","tid":785,"ts":0,"s":1,"l":2},{"t":"4swgi","tid":3,"ts":0,"s":773,"l":2},{"t":"8b2yn","tid":3,"ts":0,"l":2},{"t":"8dqkx","tid":3,"ts":0,"l":2},{"t":"8dqik","tid":3,"ts":0,"l":2},{"t":"4q2di","tid":3,"ts":0,"l":2},{"t":"4qnng","tid":3,"ts":0,"l":2,"a":2,"ie":0},{"t":"4qnnf","tid":3,"ts":1,"l":2,"a":2,"ie":1},{"t":"8dqit","tid":3,"ts":1,"l":2},{"t":"8b2ht","tid":3,"ts":1,"l":2},{"t":"4qnno","tid":3,"ts":1,"l":2,"a":2,"ie":0},{"t":"4qnnn","tid":3,"ts":5,"l":2,"a":2,"ie":1},{"t":"6xuag","tid":3,"ts":5,"l":2}
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z] [RuntimeBroker] WAM response status success
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] Checking MsalTokenResponse returned from broker.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] Success. Response contains an access token.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] Checking client info returned from the server..
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] Saving token response to cache..
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] [Instance Discovery] Instance discovery is enabled and will be performed
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] [Region discovery] Not using a regional authority.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] [SaveTokenResponseAsync] Saving Id Token and Account in cache ...
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] [CalculateSuggestedCacheExpiry] No access tokens or refresh tokens found in the accessor. Not returning any expiration.
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84]
        === Token Acquisition finished successfully:
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84]  AT expiration time: 11/11/2024 11:46:30 PM +00:00, scopes: https://management.core.windows.net//.default https://management.core.windows.net//user_impersonation. source: Broker
DEBUG: False MSAL 4.61.3.0 MSAL.CoreCLR .NET 8.0.8 Microsoft Windows 10.0.22631 [2024-11-11 22:53:02Z - 3395ee8d-bc42-446d-ab67-14b09d135a84] Fetched access token from host login.microsoftonline.com.
DEBUG: SharedTokenCacheCredential.GetToken succeeded. Scopes: [ https://management.core.windows.net//.default ] ParentRequestId:  ExpiresOn: 2024-11-11T23:46:30.6926646+00:00
DEBUG: [Common.Authentication]: Received token with LoginType 'User', Tenant: '<redacted>', UserId: '<redacted>'
DEBUG: ============================ HTTP REQUEST ============================

HTTP Method:
POST

Absolute Uri:
https://management.azure.com/providers/Microsoft.ResourceGraph/resources?api-version=2021-03-01

Headers:
Accept-Language               : en-US
x-ms-client-request-id        : a62e4668-92b6-4265-9236-10ca9cef5cb1

Body:
{
  "query": "recoveryservicesresources\n| where type == \"1microsoft.recoveryservices/vaults/replicationfabrics/replicationprotectioncontainers/replicationprotecteditems\"",
  "options": {
    "$top": 100,
    "$skip": 0,
    "resultFormat": "objectArray",
    "allowPartialScopes": false
  }
}


DEBUG: ============================ HTTP RESPONSE ============================

Status Code:
OK

Headers:
Cache-Control                 : no-cache
Pragma                        : no-cache
Strict-Transport-Security     : max-age=31536000; includeSubDomains
x-ms-correlation-request-id   : 6178f58e-2631-4a30-bb53-15c1bf761317
x-ms-ratelimit-remaining-tenant-resource-requests: 14
x-ms-user-quota-remaining     : 14
x-ms-user-quota-resets-after  : 00:00:05
x-ms-resource-graph-request-duration: 0:00:00:00.0729159
x-ms-ratelimit-remaining-tenant-reads: 249
x-ms-request-id               : 6178f58e-2631-4a30-bb53-15c1bf761317
x-ms-routing-request-id       : EASTUS2:20241111T225302Z:6178f58e-2631-4a30-bb53-15c1bf761317
X-Content-Type-Options        : nosniff
X-Cache                       : CONFIG_NOCACHE
X-MSEdge-Ref                  : Ref A: 4987A349ECA44003A53AB085C21C0E14 Ref B: BN1AA2051014019 Ref C: 2024-11-11T22:53:02Z
Date                          : Mon, 11 Nov 2024 22:53:02 GMT

Body:
{
  "totalRecords": 0,
  "count": 0,
  "data": [],
  "facets": [],
  "resultTruncated": "false"
}


VERBOSE: Received results: 0
DEBUG: 5:53:03 PM - [ConfigManager] Got nothing from [DisplaySecretsWarning], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 5:53:03 PM - [ConfigManager] Got nothing from [DisplayRegionIdentified], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 5:53:03 PM - [ConfigManager] Got nothing from [CheckForUpgrade], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: AzureQoSEvent:  Module: Az.ResourceGraph:1.0.0; CommandName: Search-AzGraph; PSVersion: 7.4.5; IsSuccess: True; Duration: 00:00:14.9884036; SanitizeDuration: 00:00:00.0000115
DEBUG: 5:53:03 PM - [ConfigManager] Got nothing from [EnableDataCollection], Module = [], Cmdlet = []. Returning default value [True].
DEBUG: 5:53:03 PM - SearchAzureRmGraph end processing.

[mcdonamw]

You know, it may be the query as I don't think it's working at all (even without -usetenantscope). I just assumed it was working before because it didn't error but looks like I get 0 results either way. I'm verifying. If this is the case, apologies for post.

[mcdonamw]

Confirmed. The issue is with the query. Now to figure out why this query does not work as it does in Graph Explorer.