Write-Error: Build-ScopeTableForDeploymentRootScope.ps1:39

[evansexon007]

Hello,

Please can you help me.

New deployment of v10.8.0

Running ADO Pipelines and receiving this error

Get scope tree for EPAC environment 'tenant' at root scope /managementGroups/mg-customer-root

Write-Error: /home/vsts/.local/share/powershell/Modules/EnterprisePolicyAsCode/10.8.0/internal/functions/Build-ScopeTableForDeploymentRootScope.ps1:39
Line |
39 | $resourceGroups = Search-AzGraphAllItems `
| ~~~~~~~~~~~~~~~~~~~~~~~~
| Failed to recover data stream after 5 attempts, information may be
| incomplete. Consider exiting running the script again.

I have tried various things,

My pipeline SPN has the following permissions on the mg-customer-root management group

I realize I have given it too many permissions but I am running out of ideas!

Permissions on the SPN itself

Thanks in advance

[brianmooremsft]

Ensure your SPN has Reader role at Tenant Root, as documented here https://azure.github.io/enterprise-azure-policy-as-code/ci-cd-app-registrations/#example-setup