Error Message

Explanation

Integration

Solution Article

Calling principal does not have required MSGraph permissions AuditLog.Read.All

Needs permission to read AuditLog. Refer to the section "Permissions Should Be Assigned" from the solution article.

AzureAD

Link

No Valid AppRoleAssignments Found

App has Zero Users.

Your app is not permitted to access the requested endpoint because it does not have the required scope

Required scopes are missing from the credentials and must be added to the credentials for Saas Discovery. Refer to the solution article for more information.

Gsuite

Link

Missing required permission: admin

Required scopes are missing and must be added. Refer the solution article for more information.

Slack

Link

Missing required permission: users:read

Required scopes are missing and must be added. Refer the solution article for more information.

not_allowed_token_type

User Token type should be “Token” for integrating Slack for SaaS Discovery. Refer solution article for steps to generate it.

You need to be on the paid version of Slack to perform this action

 You need to be on Pro, Business Plus, or Enterprise Grid Plan for integrating Slack for SaaS Discovery.

The email address format is invalid

User email is not valid. It has "#EXT#" in the email address

Microsoft 365

-

The email address format is invalid

Has an email with xx.@yy.zz. Remove the trailing dot in the username part of the email address. 

Okta

-