Refreshing service map from Microsoft.Graph 403 Forbidden about intune-resource-access HOT 2 CLOSED

You need to add the application read all permission now. Once you add that it works. The problem is that it uses the old AAD graph so it will eventually stop working in June 2022.

You need to add the AAD Graph permission and Microsoft Graph permission. https://techcommunity.microsoft.com/t5/intune-customer-success/support-tip-intune-service-discovery-api-endpoint-will-require/ba-p/2428040

Unfortunately their documentation is wrong. To add the permission you need to go to the "api my organization uses" tab. Search Windows. Then select Azure Active Directory Graph and the application read all permission.

from intune-resource-access.

Thank you very much @torontojc ! Adding the permission made it work

The full steps I performed to resolve this Permissions issue:

• Navigate to your Azure App
• Go to API permissions
• Click 'Add a permission'
• Select the 'APIs my organization uses' tab
• Search for 'windows'
• Select 'Windows Azure Active Directory'
• Select 'Application permissions'
• Select 'Application.Read.All'
• Then grant admin consent to this permission
• It started working instantly after a re-sync of the device

from intune-resource-access.