Getting an error in a runbook.

Tristan MacDonald 0

Hi there,

I've created a runbook to handle offboarding users in office 365. I'm connecting to the graph API, and exchangeonline module. My runbook is working flawlessly except for one specific line which is giving me an error when ran in the runbook (I don't get this error when ran directly from powershell.)

The system managed identity has Exchange.ManageAsApp, Exchange administrator permissions, as well as all valid graph permissions for commands I've called.

Error message:
Set-Mailbox: |Microsoft.Exchange.Data.Directory.InsufficientPermissionsException|Source server:*** doesn't have write permission to target DC:. Usually it indicates that target forest isn't an account partition of source forest. The user has insufficient access rights.

The line in question:

 # Disable shared mailbox from showing in GAL
    Set-Mailbox -Identity $userEmail -HiddenFromAddressListsEnabled $true

Tristan MacDonald 0 Reputation points

2024-04-30T17:13:11.5066667+00:00

I've looked into using the graph API for this specific line, however there is a known issue which advises not to use the graph API to hide a user from the global address list.
Jayce Yang-MSFT 1,251 Reputation points Microsoft Vendor

2024-05-01T02:26:33.12+00:00

Since you can run the cmdlet in PowerShell directly without errors, we can consider that there is no error in EXO. And this issue is caused by Runbook.

Share via

Getting an error in a runbook.