Failed To Create Blueprint

[mohanajuhi166]

when I run a365 setup, it fails to create blueprint with below error. I have both entra admin + azure contributor and owner rights assigned

I have added a sponsor to my user and also assigned the below roles

• Global Administrator

• Agent ID Administrator

• Agent ID Developer

  Failed to create application: Forbidden - {"error":{"code":"Authorization_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2025-11-19T15:59:44","request-id":"423551be-236e-4c73-b4aa-2212fd4505dc","client-request-id":"423551be-236e-4c73-b4aa-2212fd4505dc"}}}

also I get another error

Microsoft.Agents.A365.DevTools.Cli.Services.A365SetupRunner[0]
      Failed to create application: BadRequest - {"error":{"code":"Request_BadRequest","message":"No sponsor specified. Please provide at least one sponsor.","innerError":{"date":"2025-11-20T08:22:27","request-id":"62e0a78d-7b5f-4527-b4a2-08ca9eb11ba5","client-request-id":"62e0a78d-7b5f-4527-b4a2-08ca9eb11ba5"}}}

happening due to Could not retrieve current user for sponsors field: Insufficient privileges to complete the operation.

[MDUYN]

We encounter this error when walking through a tutorial where we need to obtain the values for agentBlueprintId, agentBlueprintClientSecret and tenantId. It is the following tutorial: https://learn.microsoft.com/en-us/microsoft-agent-365/developer/testing?tabs=python#step-3-configure-authentication-values-for-agent-identity-authentication.

We are trying to run the following command: a365 config display -g. However this does not give use the information that is stated in the tutorial. We should be seeing: agentBlueprintId, agentBlueprintClientSecret and tenantId.

Therefore started to run: a365 setup

[rido-min]

same here

[sellakumaran]

Thanks everyone for reporting this issue and sharing details.

Current Status
We’ve seen similar errors in other tenants where blueprint creation fails with Authorization_RequestDenied. While the exact cause for your case isn’t confirmed yet, one known risk factor is overprivileged or conflicting permissions in the environment.

Next Steps

1. Verify that the account running a365 setup has one of the required roles:

Agent ID Developer, Agent ID Administrator, or Global Administrator (as documented).

2. Check Graph CLI app permissions

In the Azure portal → App registrations → Microsoft Graph Command Line Tools (App ID: 14d82eec-204b-4c2f-b7e8-296a70dab67e), check API permissions.

• Look for Directory.AccessAsUser.All.
• This permission is highly privileged and can interfere with blueprint creation.
• If it’s present, consider removing it or replacing it with least-privilege alternatives (e.g., Directory.Read.All) and retry.

⚠️ This is a known risk factor. Removing it may impact other scenarios if it’s being used elsewhere.

Let us know if this resolves the failure in your environment.

References

https://learn.microsoft.com/graph/permissions-reference
https://learn.microsoft.com/graph/errors

We’re working on improving CLI error messages and adding clearer troubleshooting guidance in the docs.
We are also looking at ways to mitigate the issue programmatically without requiring user to remove permissions.

[mohanajuhi166]

@sellakumaran
I had to grant admin consent to Microsoft Graph Command Line Tools and the above error disappeared.

After that I get another error

though blueprint is created when I check from az config display

the agent locally also hangs and I dont get a response back

[mohanajuhi166]

update

To make the app run, I made AGENTIC_AUTH=false, used my bearer token and disabled handlers

I had to comment out handlers in in _setup_handlers in host_agent_server.py, change:

Is there a way we can debug this locally using teams on edge >this option exists on native M365 agents python version but I dont find it here for this sample

[sellakumaran]

@mohanajuhi166 , thank you for confirming that granting admin consent resolved the initial error. This is very helpful.

We're investigating the remaining issues:

1. The error message appearing despite successful blueprint creation

For issue 1, could you confirm that you've completed all the prerequisites listed in the Microsoft Agent 365 overview documentation? This will help us narrow down the cause.

2. Teams debugging

3. The local agent hanging with handlers, could you share more details about your setup:

• Are you using one of our sample repositories, or is this custom code?
• If using a sample, which repository/sample are you working with?

This will help us provide better support or direct you to the appropriate place.

We'll update this thread with our findings on the CLI-related issues.

[mohanajuhi166]

Hi @sellakumaran thank you for your quick response. Really appreciate!
I am using https://learn.microsoft.com/en-us/microsoft-agent-365/developer/quickstart-python-agent-framework because I am trying to develop a teams agent which can use agent framework .We have just requested for frontier preview license.

This specific sample currently misses m365agents.yml , m365agents.local.yml and .env setup for local teams debugging .

[GuyRoberts1972]

I also hit the "No sponsor specified. Please provide at least one sponsor." error. But granting admin consent to 'Microsoft Graph Command Line Tools' fixed it (thanks @mohanajuhi166 ).

Next issue I hit was with the device code https://microsoft.com/devicelogin , I needed to get IT to remove the block on device code as it was disabled by policy.

After that the script runs through to completion and creates the config BUT i get the failure similar to @mohanajuhi166

I am now looking how i create that end point manually?

[joratz]

Hi @GuyRoberts1972,

Can you confirm that the prerequisites in the Microsoft Agent 365 overview documentation are completed for your tenant? If you are still seeing this issue after that, please let us know.

[mohanajuhi166]

@joratz how does A365 execution differ from the M365 toolkit execution ?

[sellakumaran]

Hi @sellakumaran thank you for your quick response. Really appreciate! I am using https://learn.microsoft.com/en-us/microsoft-agent-365/developer/quickstart-python-agent-framework because I am trying to develop a teams agent which can use agent framework .We have just requested for frontier preview license.

This specific sample currently misses m365agents.yml , m365agents.local.yml and .env setup for local teams debugging .

Hi @mohanajuhi166 ,

Thanks for sharing the details and for raising this. I’ve opened a dedicated issue in the samples repo to track it:
microsoft/Agent365-Samples#90

[sellakumaran]

@joratz how does A365 execution differ from the M365 toolkit execution ?

Hi @mohanajuhi166 , can you please expand on this question please? Are you asking about agent runtime here? What do you mean by M365 toolkit execution?

[mohanajuhi166]

@sellakumaran apologies . The current other M365 samples provide provisioning and deployment capabilities using https://learn.microsoft.com/en-us/microsoftteams/platform/toolkit/microsoft-365-agents-toolkit-cli
Maybe a naive question at this point, but how does the A365 cli different from the above one ?

The A365 cli provides similar capabilities as well :https://learn.microsoft.com/en-us/microsoft-agent-365/developer/registration