Graph and PowerShell Blog

Running the MG Graph command New-MgBetaSecurityAuditLogQuery returns an error 403.
The API permission is added and Search Parameters are setup:

$SearchParameters = @{
displayName = "Joe Soap"
filterStartDateTime = "2024-07-29T08:28:56Z"
filterEndDateTime = "2024-07-29T12:28:56Z"
recordTypeFilters = @("ExchangeItemAggregated")
operationFilters= @("MailItemsAccessed") }

When we run the command we get a 403 error:

New-MgBetaSecurityAuditLogQuery -BodyParameter $searchparameters

New-MgBetaSecurityAuditLogQuery_Create: {"message":"App:xxxxxx dont have any permissions"}

Currently, I don't have a fix for this issue.

References: MS Tech Community

Graph and PowerShell Blog	Articles 2025 Running PowerShell on Linux v Windows 2024 Deleting items from Recoverable Items PoshRSJob v PowerShell Core Parallel shootout Integrated App deployment issues Mailbox appears as Mail User in O365 Graph Audit Log returns 403 Mails not getting deleted from O365 Quarantine Hash versus Generic List speed test Decommission On-Prem Exchange Automate User Creation via PowerShell and Excel List Azure Virtual Machines via PowerShell Moving from PowerShell 5.1 to Core Canyon Roadlite 6 2024 Postfix Receive and Forward Installing and configuring PHPMailer Postfix routing by filtering Advanced Postfix configuration Installing Exchange 2019 in Azure Landing Zone Upgrading PHP on Windows Adding a Postfix server for relay to O365 O365 Integrated Apps troubleshooting Domino and O365 Co-existence Delegate Control in AD App mail relay via HVE Setting up Mail Relay with HVE Getting BIMI certified Orbea Occam SL H30 Installing FreeSat and Saorview Changing broadband provider Replacing a DIN timer on fuseboard Outlook Desktop Notifications stop working Outlook folders keep moving sort order Teams report uploading to SharePoint with Runbooks Teams PowerShell module can't run CS cmd as App 2023 Cannot map new Shared Mailboxes in O365 Renewing an Exchange 2016 certificate Connect to Compliance PowerShell behind a Proxy Sensitivity Label not shown in Outlook Client Room Finder Error in Outlook Teams not showing Rooms Teams unable to open file Unable to review quarantined mails for shared mailbox Set Locale for various Apps Delegate Sent Items placed into external Tenant Overview of Microsoft Support cases When centralized mail sends via O365 Cleaning up your Windows DNS server Set OneDrive for Business Locale O365 Migration Tips Reporting on successful Azure logons IIS Mapi Queue full with NetScaler Secure Office365 reports with a certificate Using Graph to send emails with inline images Visualizing Graph data with Google Charts Keeping a log of NetScaler AlwaysON connections \| About \| Links

Graph Audit Log returns 403 22-Aug-24 Running the MG Graph command New-MgBetaSecurityAuditLogQuery returns an error 403. The API permission is added and Search Parameters are setup: $SearchParameters = @{ displayName = "Joe Soap" filterStartDateTime = "2024-07-29T08:28:56Z" filterEndDateTime = "2024-07-29T12:28:56Z" recordTypeFilters = @("ExchangeItemAggregated") operationFilters= @("MailItemsAccessed") } When we run the command we get a 403 error: New-MgBetaSecurityAuditLogQuery -BodyParameter $searchparameters New-MgBetaSecurityAuditLogQuery_Create: {"message":"App:xxxxxx dont have any permissions"} Currently, I don't have a fix for this issue. References: MS Tech Community