--- title: "Patrick Tippner (@grunz) | Hashnode" description: "Patrick Tippner (@grunz) writes on Hashnode. Read their latest articles and follow their work." url: "https://hashnode.com/@grunz" --- @grunz # Patrick Tippner @grunz · Joined March 2024 ## Comments [Hi, unfortunately, I'm running into a new issue after I've migrated both the Intune- and Entra-Backup from Service Principals to Workload Federating Identities. The Intune-backup works fine, but Entra backup always stops at a certain point: Removing existing backup directory 04:01 (UTC) Creating Azure config backup Organization/Organization.json Organization/Branding/Localizations.json Organization/CertificateBasedAuthConfiguration.json Directory/OnPremisesSynchronization.json Export-Entra: /home/it/myagent/\_work/\_temp/eeb6d2b1-b111-46fb-a950-1dca2d9b13d4.ps1:36 Line | 36 | Export-Entra "$root\\prod-backup" -CloudUsersAndGroupsOnly | ~~~~~~~~~~~~~ | GET | https://graph.microsoft.com/v1.0/directory/onPremisesSynchronization/redacted HTTP/2.0 403 Forbidden Cache-Control: no-cache Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 request-id: 4e2a5260-a2d9-4e2c-80c4-c6dfe9bc89cd client-request-id: ff9e6948-885b-4121-8fbe-82290ca98e3c x-ms-ags-diagnostic: {"ServerInfo":{"DataCenter":"Germany West Central","Slice":"E","Ring":"4","ScaleUnit":"004","RoleInstance":"FR2PEPF00000553"}} x-ms-resource-unit: 1 Date: Wed, 23 Oct 2024 02:01:26 GMT Content-Type: application/json Content-Encoding: gzip {"error":{"code":"Authorization\_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2024-10-23T02:01:26","request-id":"4e2a5260-a2d9-4e2c-80c4-c6dfe9bc89cd","client-request-id":"ff9e6948-885b-4121-8fbe-82290ca98e3c"}}} ##\[error\]PowerShell exited with code '1'. ##\[error\]PowerShell wrote one or more lines to the standard error stream. ##\[error\]Export-Entra: /home/it/myagent/\_work/\_temp/eeb6d2b1-b111-46fb-a950-1dca2d9b13d4.ps1:36 Line | 36 | Export-Entra "$root\\prod-backup" -CloudUsersAndGroupsOnly | ~~~~~~~~~~~~~ | GET | https://graph.microsoft.com/v1.0/directory/onPremisesSynchronization/redacted HTTP/2.0 403 Forbidden Cache-Control: no-cache Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000 request-id: 4e2a5260-a2d9-4e2c-80c4-c6dfe9bc89cd client-request-id: ff9e6948-885b-4121-8fbe-82290ca98e3c x-ms-ags-diagnostic: {"ServerInfo":{"DataCenter":"Germany West Central","Slice":"E","Ring":"4","ScaleUnit":"004","RoleInstance":"FR2PEPF00000553"}} x-ms-resource-unit: 1 Date: Wed, 23 Oct 2024 02:01:26 GMT Content-Type: application/json Content-Encoding: gzip {"error":{"code":"Authorization\_RequestDenied","message":"Insufficient privileges to complete the operation.","innerError":{"date":"2024-10-23T02:01:26","request-id":"4e2a5260-a2d9-4e2c-80c4-c6dfe9bc89cd","client-request-id":"ff9e6948-885b-4121-8fbe-82290ca98e3c"}}} The API permissions are exactly the same as the ones previously used for the service principal, which were working fine :-( Looking at a previously successful pipeline-run, I can see that it probably fails trying to collect the Domain-infos at that point, although the app has the Domain.read.all API-permissions. EDIT: using Graph-explorer, I found that the request for https://graph.microsoft.com/v1.0/directory/onPremisesSynchronization also requires the permission "OnPremDirectorySynchronization.Read.All". However, after granting that API-permission it still spits out exactly the same error :-/](https://hashnode.com/posts/how-to-easily-backup-your-azure-environment-using-entraexporter-and-azure-devops-pipeline/6516b6ad632586d66404b2f6/comment/67189d6464c2888b753e372f) Comment · Article · Oct 23, 2024 · [How to easily backup your Azure environment using EntraExporter and Azure DevOps Pipeline](https://hashnode.com/posts/how-to-easily-backup-your-azure-environment-using-entraexporter-and-azure-devops-pipeline/6516b6ad632586d66404b2f6) [Ondrej Sebela works like a charm - thank you very much! <3](https://hashnode.com/posts/how-to-easily-backup-your-azure-environment-using-entraexporter-and-azure-devops-pipeline/6516b6ad632586d66404b2f6/comment/65f47ebea5104295dc02f020#reply-65f6dbbe8c3aef73f0ac6103) Reply · Article · Mar 17, 2024 · [How to easily backup your Azure environment using EntraExporter and Azure DevOps Pipeline](https://hashnode.com/posts/how-to-easily-backup-your-azure-environment-using-entraexporter-and-azure-devops-pipeline/6516b6ad632586d66404b2f6) [Ondrej Sebela Thank you for pointing this out! I'm definitely using an older version, indeed. Will give it a try immediately! Thx a bunch! :-)](https://hashnode.com/posts/how-to-easily-backup-your-azure-environment-using-entraexporter-and-azure-devops-pipeline/6516b6ad632586d66404b2f6/comment/65f47ebea5104295dc02f020#reply-65f4b6d8890a661d8e39d676) Reply · Article · Mar 15, 2024 · [How to easily backup your Azure environment using EntraExporter and Azure DevOps Pipeline](https://hashnode.com/posts/how-to-easily-backup-your-azure-environment-using-entraexporter-and-azure-devops-pipeline/6516b6ad632586d66404b2f6) [Thank you for the great article and also for providing the solution to the community - very much appreciated! :-) Unfortunately, I ran into a problem where the process always keeps timing out on the same commit message: "Creating commit '2024.03.08\_12.19 ...." (content redacted ;D) The first few pipeline-runs completed without any problems, but it suddenly stopped working one day and will not continue with a certain commit and just seems to time out at a certain point. The commit message subject is always the same, so it's probably something. related to the processed data, but I'm currently out of ideas what the underlying issue might be, and I'd be very glad to get some tips on how I might debug that!](https://hashnode.com/posts/how-to-easily-backup-your-azure-environment-using-entraexporter-and-azure-devops-pipeline/6516b6ad632586d66404b2f6/comment/65f47ebea5104295dc02f020) Comment · Article · Mar 15, 2024 · [How to easily backup your Azure environment using EntraExporter and Azure DevOps Pipeline](https://hashnode.com/posts/how-to-easily-backup-your-azure-environment-using-entraexporter-and-azure-devops-pipeline/6516b6ad632586d66404b2f6)