"Forbidden (403): Insufficient privileges to complete the operation" error with Add-PnPMicrosoft365GroupMember and Add-PnPMicrosoft365Groupowner

[rashian61]

Discussed in #4276

^{Originally posted by rashian61 September 12, 2024}
Hi - I am encountering a 'Forbidden (403): Insufficient privileges to complete the operation' error with Add-PnPMicrosoft365GroupMember and Add-PnPMicrosoft365GroupOwner after creating the PnP PowerShell EntraID app (https://pnp.github.io/blog/post/changes-pnp-management-shell-registration). I can create an Office365 group using New-PnPMicrosoft365Group, create new Team sites using New-PnPSite, and also remove a Microsoft365 group using Remove-PnPMicrosoft365Group. Are there any additional permissions needed? or is this a bug? PowerShell version 7.4.5 and PnP.Power module version 2.12.0. Thanks

[readmo123]

The type needs to be delegated for the two MS Graph permissions.