CMG Setup – Error when granting Contributor permission to the Azure AD app

Error occurred when granting Contributor permission to the Azure AD app for the resource group <Resource Group >. For more information see SmsAdminUI.log

SmsAdminUI.log : You will find the following details in SmsAdminUI.log file located in %ProgramFiles%\Microsoft Configuration Manager\AdminConsole folder.

[16, PID:3448][04/29/2021 15:54:18] :Hyak.Common.CloudException\r\nInvalidAuthenticationTokenTenant: The access token is from the wrong issuer 'https://sts.windows.net/f8cdef31-a31e-4b4a-93e4-5f571e91255a/'. It must match the tenant 'https://sts.windows.net/e6d66549-5275-4d02-89d4-c9f495bae48b/' associated with this subscription. Please use the authority (URL) 'https://login.windows.net/e6d66549-5275-4d02-89d4-c9f495bae48b' to get the token. Note, if the subscription is transferred to another tenant there is no impact to the services, but information about new tenant could take time to propagate (up to an hour). If you just transferred your subscription and see this error message, please try back later.\r\n at Microsoft.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)

The Azure Activity Log show below errors. I recalled that during setup I have selected US-East region and mistakenly selected a resource group located in India. The setup was failed and I have rectified the issue next time however I continued to get same error.

Solution: I could not figure out why this issue was happening or if wrong region / resource group selection was the reason behind this. The google search show that many other also faced this issue however no real reasons was documented. As suggested in some blog, I simply closed and re-launched MECM console and started CMG setup again. It’s worked fine this time without any issue. Other mentioned that they have waited for few hours and after that it’s worked fine for them.

Related Posts:

• SCCM Application Deployment Failed with Error 0x87d01106 | ConfigMgr
• SCCM Client Installation Failed With Error Code 0x87d00215
• PXE-E99: Unexpected network error – SCCM OSD
• Configuration Manager OSD task sequence fails with error code 0x80004005
• MECM OSD Task Sequence Failed with Error 0x80072EE7
• SCCM Client Push Installation Failed with Error 0x800706ba
• Failed to Add Update Source for WUAgent of type (2) and id ({ID). Error = 0x80004005
• SCCM OSD – Domain Join Failed with Error code 0x54b on HP Elitebook 840 G8
• ccmsetup failed with error code 0x87d00227
• Fix Application Deployment error 0x87d00213 in ConfigMgr
• CMG Connection Point Status Disconnected | SCCM | ConfigMgr
• CMG Setup – Subscription ID drop down not populating
• CMG Setup – Error when granting Contributor permission to the Azure AD app
• Failed to connect with DP – Error Code 0x8004100e | ConfigMgr | SCCM
• SCCM Client Installation Failed with error 0x87d0027e
• ConfigMgr OSD – PXE Troubleshooting
• SCCM WSUS sync error – Sync Failed – WSUS server not configured
• SCCM Software Distribution Troubleshooting