Azure AD Sync problem

Question

Hello, 
 I have done all steps from your post about Sync Azure AD with Sophos Central Email Gateway but now receiving that error: The request is denied due to insufficient privileges. For example, a non-administrative principal does not have permission to delete a resource. Test iconnection pass succeeded. Any ideas what's wrong?

IQAir AG Sophos · Answer

Hi 
 I had the same issue, because this was not followed: https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/howto-configure-prerequisites-for-reporting-api

Jarrod Gibson · Answer

I found the problem. When you add the Directory.ReadAll, you have to add the legacy Azure Active Directory Graph version of Directory.ReadAll in order for it to work. This app needs to be updated by Sophos.