AADRoleEligibilityScheduleRequest - : The Role assignment already exists - on Administrative Unit as DirectoryScopeId

[landsdale]

Description of the issue

Hi guys,
I run a devops pipeline with this module configured like that:

• Name: ""
  Action: "AdminAssign"
  DirectoryScopeId: "/administrativeUnits/"
  DependsOn: "[AADGroup]"
  Ensure: "Present"
  IsValidationOnly: False
  Principal: ""
  PrincipalType: "Group"
  RoleDefinition: "Privileged Authentication Administrator"
  ScheduleInfo:
  startDateTime: "2024-07-05T11:08:33Z"
  expiration:
  type: "noExpiration"

  So the first run of the pipeline is ok and the role correctly assigned.
  From a "second run" of the pipeline we get this error:

##[error][RoleAssignmentExists] : The Role assignment already exists.
+ CategoryInfo : InvalidOperation: ({ Headers = , b...heduleRequest }:) [], CimException
+ FullyQualifiedErrorId : RoleAssignmentExists,Microsoft.Graph.Beta.PowerShell.Cmdlets.NewMgBetaRoleManagementDire
ctoryRoleEligibilityScheduleRequest_CreateExpanded
+ PSComputerName : localhost
VERBOSE: [fv-az524-586]: LCM: [ End Set ]
[[AADRoleEligibilityScheduleRequest]::[EntraID]EntraID_Configuration] in
5.5520 seconds.
##[error]The PowerShell DSC resource

No problem with the DirectoryScopeId on "/"
I think it is a bug.

Thank you in advance.

Microsoft 365 DSC Version

1.24.904.1

Which workloads are affected

Azure Active Directory (Entra ID)

The DSC configuration

AADRoleEligibilityScheduleRequest:
 - Name: "<group-to-assingn-NameDescription>"
    Action: "AdminAssign"
    DirectoryScopeId: "/administrativeUnits/<AUId>"  
    DependsOn: "[AADGroup]<group-to-assingn>"
    Ensure: "Present"
    IsValidationOnly: False
    Principal: "<group-to-assingn-Name>"
    PrincipalType: "Group"
    RoleDefinition: "Privileged Authentication Administrator"
    ScheduleInfo:
      startDateTime: "2024-07-05T11:08:33Z"
      expiration:
        type: "noExpiration"

Verbose logs showing the problem

##[error][RoleAssignmentExists] : The Role assignment already exists.
    + CategoryInfo          : InvalidOperation: ({ Headers = , b...heduleRequest }:) [], CimException
    + FullyQualifiedErrorId : RoleAssignmentExists,Microsoft.Graph.Beta.PowerShell.Cmdlets.NewMgBetaRoleManagementDire 
   ctoryRoleEligibilityScheduleRequest_CreateExpanded
    + PSComputerName        : localhost
VERBOSE: [fv-az524-586]: LCM:  [ End    Set      ]  
[[AADRoleEligibilityScheduleRequest]<group-to-assingn-NameDescription>::[EntraID]EntraID_Configuration]  in 
5.5520 seconds.
##[error]The PowerShell DSC resource

Environment Information + PowerShell Version

git version 2.45.2.windows.1
Task PowerShell Version: 2.245.1

[gibi916]

I confirm, same problem on my side. I posted a comment on the similar post #3787