Authorization_RequestDenied
This message shows up in 2 different situations. Pick the one that matches yours:
- "User:… dont have any permissions" from the audit query API rejects the USER, not the appConsent vs. Exchange audit role; Global Admin usually inherits it, so compare accountsCause and fix →
- Approving Microsoft Graph permissions for SPFx needs a Global Administrator — Application Administrator is not enoughAPI access requests for Microsoft Graph need Global Administrator (Application Administrator only covers third-party APIs), and admin consent for Graph application permissions such as Sites.Selected is explicitly excluded from Application/Cloud Application Administrator; put the role, with the citation, into the customer's preflightCause and fix →