a365 setup permissions mcp

[hemantkathuria]

Acquiring Microsoft Graph delegated access token via PowerShell (Device Code: False)
ERROR: Failed to acquire Microsoft Graph access token. Error: Write-Error: InteractiveBrowserCredential authentication failed: A window handle must be configured. See https://aka.ms/msal-net-wam#parent-window-handles

Acquiring Microsoft Graph delegated access token via PowerShell (Device Code: False)
ERROR: Failed to acquire Microsoft Graph access token. Error: Write-Error: InteractiveBrowserCredential authentication failed: A window handle must be configured. See https://aka.ms/msal-net-wam#parent-window-handles

ERROR: Failed to create inheritable permissions: 0 NoAuth Body: Failed to acquire token
ERROR: Failed to configure MCP server permissions: [SETUP_VALIDATION_FAILED] Failed to set inheritable permissions: Failed to acquire token. Ensure you have AgentIdentityBlueprint.UpdateAuthProperties.All and Application.ReadWrite.All permissions in your custom client app.

https://entra.microsoft.com/TokenAuthorize?error=invalid_request&error_description=AADSTS500027%3a+Request+denied+by+an+evaluation+policy.+Contact+your+administrator+for+details.+Trace+ID%3a+37e2c6a5-87d5-4a2b-b33a-680300e1d900+Correlation+ID%3a+c3d4f228-15d2-4c16-b672-fbc0c46e5773+Timestamp%3a+2025-12-23+11%3a19%3a03Z&admin_consent=True&state=xyz123

[pontemonti]

@hemantkathuria - thanks for reporting this issue.

This error is thrown from PowerShell command Connect-MGGraph. I had an old version of Microsoft.Graph.Authentication installed and was unable to reproduce the issue. After upgrading to the latest, 2.34.0, I'm seeing the issue. I then tried installing 2.33.0 and that one works.

You can see your current version by running:

Import-Module Microsoft.Graph.Authentication
Get-Module "Microsoft.Graph.Authentication"

If the version is 2.34.0, try to use this to mitigate:

Install-Module -Name Microsoft.Graph.Authentication -Force -RequiredVersion 2.33.0

Then exit the current Powershell instance and start a new one and run:

Uninstall-Module Microsoft.Graph.Authentication -RequiredVersion 2.34.0 -Force

Can you please try this out and let us know if this works? Thank you!

[hemantkathuria]

Thanks @pontemonti downgrading to lower version fixed the issue.

[pontemonti]

This appears to be related to microsoftgraph/msgraph-sdk-powershell#3472 - following up with the owners on this but will take some time due to holidays.

[SimonDoy]

Thanks that seems to solve the issue for me too.

[gavinbarron]

Hey folks, my team owns the Microsoft.Graph PowerShell modules.
First off, let me apologize for the disruption that this has caused you all.
We're going to work with @pontemonti and team to develop a solution here.

[sellakumaran]

Fixes are in https://www.nuget.org/packages/Microsoft.Agents.A365.DevTools.Cli/1.1.40-preview

[lsl-2020]

I met the same issue. A slight difference is that it was for "Application.ReadWrite.All" when running agent setup permissions mcp and for "AgentIdentityBlueprint.ReadWrite.All" when running a365 setup permissions bot. After downgrade it to 2.33.0, every works fine. Thank you all for figuring it out.