Skip to content

Bug report: entra app permission remove fails when removing last permission for the resource #6110

@waldekmastykarz

Description

@waldekmastykarz

Priority

(Urgent) I can't use the CLI

Description

When your app reg has only one scope and you try to remove it, the command fails with the Property requiredResourceAccess.resourceAccess value is required but is empty or missing. error

Steps to reproduce

  • Create an app reg with one scope, eg.
image
  • m365 entra app permission remove --appId some_app_id -d https://graph.microsoft.com/User.Read --force --debug

Expected results

Permission is removed

Actual results

Error: Property requiredResourceAccess.resourceAccess value is required but is empty or missing.

Diagnostics

No response

CLI for Microsoft 365 version

latest from main

nodejs version

v20

Operating system (environment)

macOS

Shell

zsh

cli doctor

No response

Additional Info

Issue is likely caused by the empty payload in the PATCH /v1.0/applications/{application-id} request

{
    "requiredResourceAccess": [
      {
        "resourceAppId": "00000003-0000-0000-c000-000000000000",
        "resourceAccess": []
      }
    ]
  }

Most likely, if we're removing the last scope, we need to remove the whole object instead of updating it.

Metadata

Metadata

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions