What permissions are needed to register a sample Agent's blueprint identity using Agent365 CLI

[IK2019]

Describe the bug
Getting error while adding a new Agent Blueprint Identity in Entra id.

WARNING: Could not retrieve current user for

: Insufficient privileges to complete the operation.
Creating Agent Blueprint application...

• Display Name: Agent365PythonAgent Blueprint
  ERROR: Failed to create application: BadRequest - {"error":{"code":"Request_BadRequest","message":"No sponsor specified. Please provide at least one sponsor.","innerError":{"date":"2025-12-31T19:49:31","request-id":"1335c81e-214c-4573-ad67-06234929675a","client-request-id":"1335c81e-214c-4573-ad67-06234929675a"}}}
  ERROR: Failed to create agent blueprint

Already configured the following:

• Global Administrator or Privileged Role Administrator required to grant other permissions.
  

• Added to following roles required to Create a blueprint: Agent ID Developer or Agent ID Administrator in Entra Id. 
  

• Using A365 CLI PowerShell so added following Microsoft Graph permissions: AgentIdentityBlueprint.Create (delegated permission) AgentIdentityBlueprint.Create (application permission) 
  

• what else is needed to define scope?

To Reproduce
Steps to reproduce the behavior:

1. In Agent365 CLI, run the following:
   a365 setup blueprint -v

Error is displayed after success adding Graph permissions (see attached)

Screenshots:
Please see the error

I am extending the Python Template created with Agent framewrok

[joratz]

Known issue (#66) that was resolved by #78. The output in the screenshot appears to be from an older version of the CLI which did not contain this fix. @IK2019 can you try the setup blueprint command again with a more recent version of the CLI?

[IK2019]

Issue has been resolved. I added few more permissions. All permissions to create a blueprint:

• Add user\admin to Application Administrator (in Microsoft Entra Admin Center -> Roles and administrators ) with Scope type as Application and Selected scope as the Agent365 CLI application.

• Added to Agent ID Developer role or Agent ID Administrator in Entra Id.

• add A365 CLI Application registered in Azure App Registrations with following Microsoft Graph and application permissions:

  AgentIdentityBlueprint.Create (delegated permission) AgentIdentityBlueprint.Create (application permission)
  Application.ReadWrite.All (delegated permission)
  Application.ReadWrite.All (application permission)
  User.ReadWrite.All (delegated permission)
  User.ReadWrite.All application permission)