Maester enterprise app with delegate access

[pesip]

I need advice on how to create an Enterprise app to run all the tests.

I am frequently using the module in interactive mode. If I have Global Administrator role, all available tests are executed. As seen in the following image:

Sometimes this approach doesn't work, and it's necessary to create an Enterprise app with the api permissions like delegated permissions described in the documentation. As seen in the following image:

In this case, only 76 tests are executed. As seen in the following image:

I need advice on how to create an Enterprise app to run all the tests.

[pesip]

These categories are missed:

Authentication Method - FIDO2 security key
Authentication Method - General Settings
Authentication Method - Microsoft Authenticator
Authentication Method - Temporary Access Pass
Authentication Method - Voice call
Conditional Access WhatIf
Consent Framework - Admin Consent Request
Default Authorization Settings
Default Settings - Classification and M365 Groups
Default Settings - Consent Policy Settings
Default Settings - Password Rule Settings
Entra Recommendations

[soulemike]

Hi @pesip, did you setup the optional permissions, it looks like you may be missing RoleEligibilitySchedule.ReadWrite.Directory, then you'd also need to give the service principal access to an EXO and Azure role. Once those permissions are set you'd need to also call Connect-Maester -Service All.

https://maester.dev/docs/monitoring/azure-container-app-job#optional-grant-permissions-to-exchange-online
https://maester.dev/docs/installation#connecting-to-azure-exchange-and-other-services

[pesip]

Hi, thanks for your response. I’m dealing with an issue where tests are missing when running between the Enterprise app and an interactive environment.

When I use GitHub Actions, everything works fine. Unfortunately, I can't use GitHub for all situations.