[BUG] Getting 401 unauthorized when Connecting to PNP w/ AppID -noninteractive with certificate

[thacold1]

Notice

Many bugs reported are actually related to the PnP Framework which is used behind the scenes. Consider carefully where to report an issue:

1. Are you using Invoke-PnPSiteTemplate or Get-PnPSiteTemplate? The issue is most likely related to the Provisioning Engine. The Provisioning engine is not located in the PowerShell repo. Please report the issue here: https://github.com/pnp/pnpframework/issues. No
2. Is the issue related to the cmdlet itself, its parameters, the syntax, or do you suspect it is the code of the cmdlet that is causing the issue? Then please continue reporting the issue in this repo. Yes
3. If you think that the functionality might be related to the underlying libraries that the cmdlet is calling (We realize that might be difficult to determine), please first double check the code of the cmdlet, which can be found here: https://github.com/pnp/powershell/tree/master/src/Commands. If related to the cmdlet, continue reporting the issue here, otherwise report the issue at https://github.com/pnp/pnpframework/issues

Reporting an Issue or Missing Feature

When connection to PNP.Online using an AppID Non-interactively w/ certificate, running a Get-PNPTenant or Set-PNPTenant produces a: Get-PnPTenant: The remote server returned an error: (401) Unauthorized.

Expected behavior

To see or modify Tenant settings for SPO

Actual behavior

Please describe what you see instead. Please provide samples of output or screenshots.
When attempting to Get or Set-PNPTenant we receive a 401 unauthorized error

Steps to reproduce behavior

Please include complete script or code samples in-line or linked from gists
Connect-PNPOnline -clientID $AppID -AzureEnvironment USGovernmentHigh -Url $URL -clientsecret $Secret

also

Connect-PNPOnline -clientID $AppID -AzureEnvironment USGovernmentHigh -Url $URL -tenant $tenantID -certificatePath $certificate -certificatepassword (convertto-secureString -asPlaintext " * " -force)

What is the version of the Cmdlet module you are running?

2.12.0
And we've tested 2.99 nightly same issue.

Which operating system/environment are you running PnP PowerShell on?

• [x ] Windows
• Linux
• MacOS
• Azure Cloud Shell
• Azure Functions
• Other : please specify

[gautamdsheth]

hey @thacold1 , thanks for raising this issue.

For the error that you are facing, you need to modify the permissions.
You need to change the Office 365 SharePoint online permissions and select application permissions and then select Sites.FullControl.All