issue with SPOUserProfileProperty | SPN | Cannot bind argument to parameter 'Properties' because it is null.

[maheshdalavi]

Details of the scenario you tried and the problem that is occurring

run the command with

Export-M365DSCConfiguration -Components @("SPOUserProfileProperty") -ApplicationId $ApplicationId -CertificateThumbprint $CertificateThumbprint -TenantId $TenantId -Verbose

• SPN has Sharepoint = Sites.FullControl.All, Organization.Read.All and other permissions.
• All components are working fine except SPOUserProfileProperty

Verbose logs showing the problem

[2023-01-18 03.25.27]
{InvalidData}
System.Management.Automation.ParameterBindingValidationException: Cannot bind argument to parameter 'Properties' because it is null.
at System.Management.Automation.ExceptionHandlingOps.CheckActionPreference(FunctionContext funcContext, Exception exception)
at System.Management.Automation.Interpreter.ActionCallInstruction`2.Run(InterpretedFrame frame)
at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)
at System.Management.Automation.Interpreter.EnterTryCatchFinallyInstruction.Run(InterpretedFrame frame)
"Error during Export:"
at Export-TargetResource, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.23.111.1\DSCResources\MSFT_SPOUserProfileProperty\MSFT_SPOUserProfileProperty.psm1: line 324
at Start-M365DSCConfigurationExtract, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.23.111.1\modules\M365DSCReverse.psm1: line 615
at Export-M365DSCConfiguration, C:\Program Files\WindowsPowerShell\Modules\Microsoft365DSC\1.23.111.1\modules\M365DSCUtil.psm1: line 1190
at , : line 1
TenantId: maheshms365.onmicrosoft.com

Suggested solution to the issue

The DSC configuration that is used to reproduce the issue (as detailed as possible)

# insert configuration here

The operating system the target node is running

OsName : Microsoft Windows 10 Home Single Language
OsOperatingSystemSKU : 100
OsArchitecture : 64-bit
WindowsVersion : 2009
WindowsBuildLabEx : 19041.1.amd64fre.vb_release.191206-1406
OsLanguage : en-US
OsMuiLanguages : {en-US}

Version of the DSC module that was used ('dev' if using current dev branch)

[andikrueger]

Please have a look at this thread. Within SharePoint you need to assign additional permissions to the app.

pnp/PnP-PowerShell#2582

[jeffreykarlan]

Please have a look at this thread. Within SharePoint you need to assign additional permissions to the app.

pnp/PnP-PowerShell#2582

Hi,
I'm having this issue. I'm not seeing a clear solution or fix in the suggested thread? Only some hints at a workaround? Is this identified as a bug in MS365DSC Required Application Permissions? Thank you.

[NikCharlebois]

What provider are you using for the Sites.FullControl.All permissions? This needs to be the SharePoint provider, not the Microsoft Graph one:

[jeffreykarlan]

Hello,

I'm attempting to export only, no writing. I have https://microsoft.sharepoint-df.com/Sites.Read.All.

Ah! Looks like my app needs full control to read? Should this be necessary?

Thank you

[maheshdalavi]

@NikCharlebois Application has SharePoint:Sites.fullControl.all.
along with SPOUserProfileProperty,
Access denied for SPOSiteAuditSettings (Private site) and error in SPOHubSite.

[NikCharlebois]

@jeffreykarlan Sites.FullControl.All is a requirement of the SPO APIs even if you are just doing an export.

[NikCharlebois]

Looks like we were missing a permission for the SPOUserProfileProperty. You will also need to grant:

SharePoint:
User.Read.All

In order of it to work. A fix is in the work to properly document this. Thanks