CMG Setup – Error when granting Contributor permission to the Azure AD app

Error occurred when granting Contributor permission to the Azure AD app for the resource group <Resource Group >. For more information see SmsAdminUI.log

SmsAdminUI.log : You will find the following details in SmsAdminUI.log file located in %ProgramFiles%\Microsoft Configuration Manager\AdminConsole folder.

[16, PID:3448][04/29/2021 15:54:18] :Hyak.Common.CloudException\r\nInvalidAuthenticationTokenTenant: The access token is from the wrong issuer 'https://sts.windows.net/f8cdef31-a31e-4b4a-93e4-5f571e91255a/'. It must match the tenant 'https://sts.windows.net/e6d66549-5275-4d02-89d4-c9f495bae48b/' associated with this subscription. Please use the authority (URL) 'https://login.windows.net/e6d66549-5275-4d02-89d4-c9f495bae48b' to get the token. Note, if the subscription is transferred to another tenant there is no impact to the services, but information about new tenant could take time to propagate (up to an hour). If you just transferred your subscription and see this error message, please try back later.\r\n at Microsoft.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

The Azure Activity Log shows the following errors. I recalled that during setup, I selected the US-East region and mistakenly selected a resource group located in India. The setup failed, and I rectified the issue next time; however, I continued to get the same error.

Solution: I could not figure out why this issue was happening or if the wrong region/resource group selection was the reason behind this. The Google search shows that many others have also faced this issue; however, no real reasons were documented. As suggested in some blogs, I simply closed and re-launched MECM console and started the CMG setup again. It’s worked fine this time without any issue.

Others mentioned that they have waited for a few hours, and after that it’s worked fine for them.

Related Posts:

• SCCM Application Deployment Failed with Error 0x87d01106 | ConfigMgr
• SCCM Client Installation Failed With Error Code 0x87d00215
• PXE-E99: Unexpected network error – SCCM OSD
• Configuration Manager OSD task sequence fails with error code 0x80004005
• MECM OSD Task Sequence Failed with Error 0x80072EE7
• SCCM Client Push Installation Failed with Error 0x800706ba
• Failed to Add Update Source for WUAgent of type (2) and id ({ID). Error = 0x80004005
• SCCM OSD – Domain Join Failed with Error code 0x54b on HP Elitebook 840 G8
• ccmsetup failed with error code 0x87d00227
• Fix Application Deployment error 0x87d00213 in ConfigMgr
• CMG Connection Point Status Disconnected | SCCM | ConfigMgr
• CMG Setup – Subscription ID drop down not populating
• CMG Setup – Error when granting Contributor permission to the Azure AD app
• Failed to connect with DP – Error Code 0x8004100e | ConfigMgr | SCCM
• SCCM Client Installation Failed with error 0x87d0027e
• ConfigMgr OSD – PXE Troubleshooting
• SCCM WSUS sync error – Sync Failed – WSUS server not configured
• SCCM Software Distribution Troubleshooting