[BUG] Setting Sensitivity Label on a site with Sites.Selected

[paylord]

Reporting an Issue or Missing Feature

Unable to set site sensitivity label with Sites.Selected and Sites.Create.All.

Expected behavior

Apply a site sensitivity label

Actual behavior

Connecting using app-only auth with a certificate to an app registration having Sites.Create.All and Sites.Selected.
The site was created using a Graph API call and FullControl applied as a site app permission automatically. This is working fine for most other config settings.

Behaviour varies depending on calls used - see below.

Steps to reproduce behavior

Connect-PnPOnline -Url $siteUrl -Tenant $tenant -ClientID $clientID -Thumbprint $thumbprint
Set-PnPSiteSensitivityLabel -Identity
Attempted to perform an unauthorized operation.
Set-PnPSite -SensitivityLabel
No error - does nothing
Set-PnPSite -SensitivityLabel
Cannot bind parameter 'SensitivityLabel'. Cannot convert to type "System.Guid". Error: "unrecognized Guid format."

I get the same "unauthorized operation" error when trying to set StorageMaximumLevel and StorageWarningLevel but makes more sense that these are tenant properties. Though not sure how they can be set with Sites.Selected and FullControl?

What is the version of the Cmdlet module you are running?

Tried both:
3.10
3.1.329

Which operating system/environment are you running PnP PowerShell on?

• Windows

[paylord]

Another one that fails with Sites.Selected FullControl is:
Set-PnPSite -DisableSharingForNonOwners
"Attempted to perform an unauthorized operation"

[reshmee011]

We had other issues with Sites.Selected

See recent ones : #5139, #5169.

We closed it as they were following with Microsoft but did not receive any response of the outcome. I would suggest the same to reproduce the issue with Postman and raise an issue with Microsoft.

[paylord]

@reshmee011 - thanks for the quick response.

I will see what I can do with postman though working on a client environment so have some limitations. Graph might be simpler - though not sure if everything can be done via Graph.

What about the Set-PnPSite -SensitivityLabel? It does not give any response at all but also does nothing. Is that what you would expect?

[reshmee011]

Set-PnPSite -SensitivityLabel does not seem to be working

Use the cmdlet Set-PnPSiteSensitivityLabel and Get-PnPSiteSensitivityLabel instead.

[NishkalankBezawada]

Set-PnPSite -SensitivityLabel does not seem to be working

Use the cmdlet Set-PnPSiteSensitivityLabel and Get-PnPSiteSensitivityLabel instead.

I get the same, Even after Metered API is enabled to my Azure. It works fine if we are setting it via Azure Functions. I am checking on this, will get back as soon as I could.

//Nish

[paylord]

@reshmee011 - I tried both.
Set-PnPSiteSensitivityLabel throws an unauthorised operation error.
Get-PnPSiteSensitivityLabel throws an object id "site:" is invalid

@NishkalankBezawada - interesting that it works via an Azure Function?

[NishkalankBezawada]

@reshmee011 - I tried both. Set-PnPSiteSensitivityLabel throws an unauthorised operation error. Get-PnPSiteSensitivityLabel throws an object id "site:" is invalid

@NishkalankBezawada - interesting that it works via an Azure Function?

@paylord I am sorry, I have a different scope of permissions. Let me check try with Sites.Selected and Sites.Create.All scopes